The CISO requests a custom XSIAM reporting template that provides a weekly 'Executive Summary' of the top 3 critical threats detected, their MITRE ATT&CK techniques, the number of affected assets, and their geographic distribution. This report needs to be distributed as a PDF via email every Monday morning. To automate this, which XSIAM capabilities must be leveraged?
正解:B
Automating a comprehensive executive summary report with specific content and delivery requirements necessitates XSIAM's advanced reporting features. Option B accurately describes the necessary steps. A custom report template allows integrating complex XQL queries to derive the top threats, their MITRE ATT&CK techniques (likely requiring a with MITRE data or pre-enriched incident data), and affected join assets. Geographic distribution necessitates a 'Map' visualization within the report. Crucially, XSIAM's report scheduling feature supports automated email delivery in PDF format, directly addressing the CISO's request. Options A, C, D, and E are either manual, insufficient, or external to XSIAM's integrated reporting capabilities.