You need to export a list of all deletions for a specific Host Name in the last 24 hours. What is the best way to do this?

The correct answer is C. In the Investigate module, access the Detection Activity page. Use the filters to focus on the. The best way to export a list of all deletions for a specific Host Name in the last 24 hours is to go to the Investigate module, access the Detection Activity page, use the filters to focus on the appropriate hostname and time, then export the results. This will allow you to down

Detection Management and Investigation

Question

Options

AGo to Host Management in the Host page. Select the host and use the Export Detections button
BUtilize the Detection Resolution Dashboard. Use the filters to focus on the appropriate hostname
CIn the Investigate module, access the Detection Activity page. Use the filters to focus on the
DUtilize the Detection Activity Dashboard. Use the filters to focus on the appropriate hostname and

How the community answered

(46 responses)

A
4% (2)
B
4% (2)
C
78% (36)
D
13% (6)

Explanation

The best way to export a list of all deletions for a specific Host Name in the last 24 hours is to go to the Investigate module, access the Detection Activity page, use the filters to focus on the appropriate hostname and time, then export the results. This will allow you to download a CSV file that contains information about all the detections that were deleted for that host in that time period. The other options are either incorrect or not related to exporting deletions.

Topics

#detection activity#investigation#event export#hostname filtering

Community Discussion

No community discussion yet for this question.

Full CCFA-200B Practice