What does DBot use to score an indicator that has multiple reputation scores?
What does DBot use to score an indicator that has multiple reputation scores?
DBot is designed to ensure the highest level of security when analyzing threat intelligence. When an indicator has multiple reputation scores from different sources, DBot uses the most severe score to minimize the risk of overlooking a potential threat.
A is correct
In Palo Alto Networks’ Cortex XSOAR (formerly Demisto), DBot is an AI-powered chatbot that assists security analysts in various tasks, including threat intelligence analysis. When dealing with indicators that have multiple reputation scores from different sources, DBot employs a conservative approach to ensure the highest level of security.