How is the event ID assigned in Sguil?
- All events in the series of correlated events are assigned the same event ID.
- Only the first event in the series of correlated events is assigned a unique ID.
- All events in the series of correlated events are assigned the same event group ID.
- Each event in the series of correlated events is assigned a unique ID.
Explanation: In Sguil, each event receives a unique event ID, but only the first event ID in the series of correlated events is displayed in the RealTime tab.
Exam with this question: CyberOps Associate (Version 1.0) - CyberOps Associate 1.0 Practice Final exam
Please login or Register to submit your answer