In which two locations can mapping be configured for indicators?

The correct answers areA (Feed Integration settings)andB (Classification & Mapping tab).

Feed Integration settings:Mapping of indicator fields can be configured directly within the feed integration configuration, allowing incoming threat intelligence feeds to be parsed and mapped correctly to XSIAM fields.

Classification & Mapping tab:This tab is available in various integration and indicator settings, enabling detailed field mapping and classification logic for incoming indicators.

"Mapping for indicators can be set within the Classification & Mapping tab or during Feed Integration setup to ensure proper parsing and normalization."

Document Reference:XSIAM Analyst ILT Lab Guide.pdf

Page:Page 36 (Threat Intel Management section)

===========