When creating new IOCs in IOC management, which of the following fields must be configured?
When creating new IOCs in IOC management, which of the following fields must be configured?
When creating new IOCs in IOC management, the fields Hash, Platform, and Action must be configured. The Hash uniquely identifies the indicator, the Platform specifies the operating systems the IOC applies to, and the Action determines the response when the IOC is detected.
D is correct
Tested in the Falcon Console
D is correct , tested in UI