A hunter needs each true match on a court-clerk detection to raise the identity's risk score without paging email. Which default-style Adaptive Response should be selected?
Select an answer to reveal the explanation.
Short Explanation
Need a risk score, not an inbox fire drill? Pick the risk analysis Adaptive Response, because email, ping, and nbtstat are different tools on the same belt. ES already has a Risk framework; ICMP is not it.
Full Explanation
Default-style Enterprise Security Adaptive Responses include notable creation, risk analysis, email, ping, nbtstat, and nslookup. Writing risk to a court-clerk identity is the risk analysis action, not email or network enrichment. Choosing ping or nbtstat does not populate the Risk framework.