What is the primary benefit of setting the "--memory-swap" option to "-1" during Cortex XSIAM engine deployment?
While using the playbook debugger, an engineer attaches the context of an alert as test data.
What happens with respect to the interactions with the list objects via tasks in this scenario?
Which cytool command will look up the policy being applied to a Cortex XDR agent?
When a Cortex XSIAM playbook execution reaches a breakpoint on a non-manual task, which two actions will allow the playbook to continue? (Choose two.)
An engineer is conducting a threat actor emulated test to determine which Cortex XDR module would provide protection or alert on a real-world attack. The first test was prevented.
Which action must the engineer take to enable continued testing?
A Remove the hash from the restrictions profile