Adaptive response action history is stored in which index?
A.
cim_modactions
B.
modular_history
C.
cim_adaptiveactions
D.
modular_action_history
The Answer Is:
A
This question includes an explanation.
Explanation:
Adaptive response action history is stored in the cim_modactions index. This index contains the events generated by the adaptive response actions that are triggered by correlation searches or run manually from Incident Review. You can use this index to search, audit, and report on the adaptive response actions that have been executed in your environment. You can also view the adaptive response action history on the Adaptive Response dashboard in Enterprise Security1. References =