The same pair of actions—create a notable and add risk—should fire every time a parking-garage camera detection matches. How should Adaptive Response be configured?
Select an answer to reveal the explanation.
Short Explanation
If the same two chores always happen when the camera detection fires, put them on the correlation search like a standing work order. Ad-hoc Adaptive Response is for the calls a human should still make. Memory is a bad scheduler.
Full Explanation
When the same Adaptive Response should always fire—create notable plus add risk—configure it on the correlation search or detection. Ad-hoc AR remains for analyst judgment. Playbook authoring is out of analyst scope, and emailing the mayor on every camera event is not a substitute for scheduled AR.