The CIO wants a civic-wide snapshot of notables by domain and urgency for the morning briefing, not a packet decode. Which built-in ES view fits?
Select an answer to reveal the explanation.
Short Explanation
Security Posture is the city-wide weather map. Leadership gets notables by domain and urgency, not a packet microscope. Save Stream decode for protocol questions.
Full Explanation
Security Posture (or the equivalent ES overview) is the summary-layer dashboard for notables by security domain and urgency. It is meant for situational awareness, including leadership briefings. Packet capture, per-host Protocol Intelligence, and Incident Review Audit (analyst-workflow audit) answer different questions and are not the civic-wide snapshot.