An administrator selects the Discovered Items list in the ICDm to investigate a recent surge...

In theDiscovered Items listwithin the ICDm (Integrated Cyber Defense Manager), the administrator shouldapply a list filterto display only high-risk files. List filters allow administrators to refine displayed results based on specific criteria, such as threat level, enabling focused analysis on high-risk items.

How List Filters Help in Investigations:

Applying a filter for high-risk items ensures that the administrator can concentrate on the most critical threats first, optimizing the investigation process and enabling prompt response.

Why Other Options Are Less Effective:

List control(Option A) andsearch rule(Option B) do not apply here, as they are not filtering mechanisms in the Discovered Items list.

Search modifier(Option C) may refine search terms but does not provide the same targeted filtering functionality as a list filter.

References: Using list filters is a standard practice in ICDm to efficiently narrow down threat items based on risk levels​.