What happens when the indicator of compromise (IOC) engine on FortiAnalyzer finds web logs that match blacklisted IP addresses?
You are trying to configure a task in the playbook editor to run a report.
However, when you try to select the desired playbook, you do to see it listed.
What is the reason?
Which statement about the FortiSIEM management extension is correct?
Exhibit.
What does the data point at 12:20 indicate?
Which log will generate an event with the status Contained?