Question: 1/50
An analyst wants to quickly pivot from an alert about a suspicious process to everything that happened on the same endpoint around that time (process tree, child processes, network connections). Which Cortex XDR view best supports this workflow?
Causality view (process/causality chain)
Agent installation status dashboard
Data retention settings page
Broker VM deployment wizard