Inside the Incidents table view, which actions can be performed on the selected incidents? (Choose two.)
Inside the Incidents table view, which actions can be performed on the selected incidents? (Choose two.)
Inside the Incidents table view, running commands for incidents with Active status is a common action, as it ensures only relevant events are processed. Also, exporting incidents and managing their status are typical functionalities, but not as complete as Run Command in terms of status specificity. Thus, the ability to perform actions like Run Command for active incidents and export incidents as JSON or change their status are two clear functionalities inside the Incidents table view. Other options like Assign, Edit, and Mark as Duplicate, while useful, do not necessarily apply to incidents regardless of their status, and closing and deleting incidents is often subject to status constraints.
AB is correct https://docs.fortinet.com/document/fortindr-cloud/2024.2.0/cortex-xsoar-integration-guide/46051/viewing-incidents-in-cortex-xsoar
CD is correct
This is not correct. Export only provides a csv. It's AB.