Hello Live community, I have a question about the report on Cortex, i want to know if the “Infected Endpoints” comes as default in Cortex reports or if we need to configure something to show that option? Do the widgets "incidents by source" or "Top incidents (Top 10) " display the infected Host? I suppose that incidents by source will be the closest thing to infected host. As i can understand, if the agent has created an event, it s because Cortex has done its job and prevent the host from being infected, so the host is not infected. But will we see it in the Report? Or how can we see it in the report? Thanks in advance for your reply. Best regards.
... View more