A core function of Google SecOps is to collect information and present it in a way that it is actionable by humans or automation. What is the logical order of SOAR elements and their grouping?
- Events -> Alerts -> Rule
- Alerts -> Groups -> Rule
- Events -> Alerts -> Case
- Alerts -> Events -> Case