QRadar analysts can download different types of content extensions from the IBM X-Force Exchange portal. Which two (2) types of content extensions are supported by QRadar?

IBM X-Force Exchange provides various content extensions for QRadar to enhance its threat detection capabilities. These extensions are packaged collections of custom QRadar content. According to the IBM QRadar documentation, content extensions can include a variety of components such as custom rules, reports, dashboards, custom properties, and custom functions. FGroup, or rule group, is also a component that can be packaged within a content extension to organize the included custom rules. Therefore, Custom Functions and FGroup are both valid types of content that can be included in a QRadar content extension downloadable from the X-Force Exchange.

B. Events: Events are raw data processed by QRadar, not downloadable content extensions.
C. Flows: Flows are network session data collected and processed by QRadar, not content extensions.
E. Offenses: Offenses are generated by QRadar's correlation engine based on rules; they are the output of content, not the content itself.

1. IBM QRadar Content Management, "Content extensions". IBM Documentation, Last Updated: December 14, 2023. "A content extension can contain... custom rules, reports and searches, custom properties, reference data, dashboards, custom functions, custom rule actions and scripts, rule groups (FGroup)..."

2. IBM Security App Exchange for QRadar, "Creating and exporting content". IBM Documentation, Last Updated: December 14, 2023. This guide details the components that can be exported into a content extension, explicitly listing custom functions and rule groups (FGroup).