← Detection-as-Code — Git, CI, Tests, Deployment

Module Quiz

8 questions · Pass at 75%

Question 1 of 8

A detection engineer edits a Sigma rule directly in the Splunk UI during an incident and doesn't commit the change to the detection repository. What are the two most serious risks?