When using the Dynamic Search window on the Admin tab, which two (2) data sources are available? 

An analyst wishes to review an event which has a rules test against both event and flow data. What kind of rule is this?

Which QRadar component provides the user interface that delivers real-time flow views? 

A Security Analyst has noticed that an offense has been marked inactive. How long had the offense been open since it had last been updated with new events or flows?

AQRadar analyst can check the rule coverage of MITRE ATT&CK tactics and techniques by using Use Case Manager. In the Use Case Manager app, how can a QRadar analyst check the offenses triggered and mapped to MITRE ATT&CK framework?