What does Cortex Xpanse ingest from XDR endpoints?

Which action should be performed by every Cortex Xpanse proof of value (POV)?

When integrating with Splunk, what will allow you to push alerts into Cortex XSOAR via the REST API?

A Cortex XSOAR customer wants to send a survey to users asking them to input their manager's email for a training use case so the manager can receive status reports on the employee's training. However, the customer is concerned users will provide incorrect information to avoid sending status updates to their manager.
How can Cortex XSOAR most efficiently sanitize user input prior to using the responses in the playbook?

What is the difference between an exception and an exclusion?