CrowdStrike
CCFA-200B · Question #152
Which of the following is an effective Custom IOA rule pattern to kill any process attempting to
The correct answer is A. .*badguydomain.com.*. You are usuing RegEx here and need leading "." to capture www and then need a "." at the end to identify any sites falling under badguydomain.com.
Detection and Prevention Policies
Question
Which of the following is an effective Custom IOA rule pattern to kill any process attempting to
Options
- A.badguydomain.com.
- Cbadguydomain.com.*
- DCustom IOA rules cannot be created for domains
How the community answered
(33 responses)- A64% (21)
- C12% (4)
- D24% (8)
Explanation
You are usuing RegEx here and need leading "." to capture www and then need a "." at the end to identify any sites falling under badguydomain.com.
Topics
#Custom IOA rules#regex patterns#domain matching#rule authoring
Community Discussion
No community discussion yet for this question.