An administrator wants to be notified when particular Tactics, Techniques, or Procedures (TTPs) are observed on a managed endpoint. Which notification option must the administrator configure to receive this notification?
A VMware Carbon Black managed endpoint is showing up as an inactive device in the console. What is the threshold, in days, before a machine shows as inactive?