Review this EDR query: childproc_name:whoami.exe AND childproc_name:hostname.exe AND childproc_name:tasklist.exe AND childproc_name:ipconfig.exe Which process would show in the query results?

Question

Options

• AAny process invoked by whoami.exe, hostname.exe, tasklist.exe, and ipconfig.exe
• BAny process invoked by whoami.exe, hostname.exe, tasklist.exe, or ipconfig.exe
• CAny process invoking whoami.exe, hostname.exe, tasklis.exe, or ipconfig.exe
• DAny process invoking whoami.exe, hostname.exe, tasklist.exe, and ipconfig.exe

• A
  11% (5)
• B
  4% (2)
• C
  2% (1)
• D
  83% (39)

No community discussion yet for this question.