최신CrowdStrike Certified Falcon Hunter - CCFH-202무료샘플문제

A. RpcProcessld_decimal

B. ParentProcessld_decimal

C. ContextProcessld_decimal

D. RawProcessld_decimal

A. Event Actions are pivotable workflows including connecting to a host, pre-made event searches and pivots to other investigatory pages such as host search

B. Event Actions contains the summary of actions taken by the Falcon sensor such as quarantining a file, prevent a process from executing or taking no actions and creating a detection only

C. Event Actions is the field name that contains the event name defined in the Events Data Dictionary such as ProcessRollup, SyntheticProcessRollup, DNS request, etc

D. Event Actions contains an audit information log of actions an analyst took in regards to a specific detection

A. It provides a list of all the detect names and descriptions found in the Falcon Cloud

B. It provides a list of compatible splunk commands used to query event data

C. It provides pre-defined queries you can customize to meet your specific threat hunting needs

D. It provides a reference of information about the events found in the Investigate > Event Search page of the Falcon Console

A. relative time

B. typeof

C. now

D. strftime

A. Emailing the intended victim with a malware attachment

B. Installing a backdoor on the victim endpoint

C. Loading a malicious payload into a common DLL

D. Discovering internet-facing servers

A. Man-in-the-middle Attack

B. Phishing Attack

C. Web Application Attack

D. Brute Forcing Attack

A. The Mac Sensor report displays a listing of all Mac hosts with a Falcon sensor installed

B. The Mac Sensor report displays a listing of all Mac hosts without a Falcon sensor installed

C. The Mac Sensor report provides a detection focused view of known malicious activities occurring on Mac hosts, including machine-learning and indicator-based detections

D. The Mac Sensor report provides a comprehensive view of activities occurring on Mac hosts, including items of interest that may be hunting or investigation leads