Which of the following paths will successfully activate Remediation Suggestions?

Remediation Suggestions is a feature of Cortex XDR that provides you with recommended actions to

remediate the root cause and impact of an incident. Remediation Suggestions are based on the

analysis of the causality chain, the behavior of the malicious files or processes, and the best practices

for incident response. Remediation Suggestions can help you to quickly and effectively contain and

resolve an incident, as well as prevent future recurrence.

To activate Remediation Suggestions, you need to follow these steps:

In the Cortex XDR management console, go to Incidents and select an incident that you want to

remediate.

Click Causality View to see the graphical representation of the causality chain of the incident.

Click Actions and select Remediation Suggestions. This will open a new window that shows the

suggested actions for each node in the causality chain.

Review the suggested actions and select the ones that you want to apply. You can also edit or delete

the suggested actions, or add your own custom actions.

Click Apply to execute the selected actions on the affected endpoints. You can also schedule the

actions to run at a later time or date.

Reference:

Remediate Changes from Malicious Activity: This document explains how to use Remediation

Suggestions to remediate the root cause and impact of an incident.

Causality View: This document describes how to use Causality View to investigate the causality chain

of an incident.