What are two reasons incident investigation is needed in Cortex XDR? (Choose two.)
What are two reasons incident investigation is needed in Cortex XDR? (Choose two.)
No solution will stop every attack, requiring further investigation of activity. Insider threats may not be blocked, and initial activity may go undetected. These reasons highlight the necessity for incident investigation in Cortex XDR to identify and mitigate potential security breaches that have bypassed initial defenses or originated from within the organization.
B,C should be correct
B,C are correct