CCFA-200B · Question #54
Which of the following uses Regex to create a detection or take a preventative action?
The correct answer is C. Custom IOA. The option that uses regex to create a detection or take a preventative action is Custom IOA. A Custom IOA (indicator of attack) allows you to define custom rules for detecting or preventing suspicious behavior based on process execution, file write, network connection, or regist
Question
Which of the following uses Regex to create a detection or take a preventative action?
Options
- ACustom IOC
- BMachine Learning Exclusion
- CCustom IOA
- DSensor Visibility Exclusion
How the community answered
(53 responses)- A2% (1)
- B4% (2)
- C92% (49)
- D2% (1)
Explanation
The option that uses regex to create a detection or take a preventative action is Custom IOA. A Custom IOA (indicator of attack) allows you to define custom rules for detecting or preventing suspicious behavior based on process execution, file write, network connection, or registry events. You can use regex syntax to create a Custom IOA rule that matches the event data that you want to monitor or block.
Topics
Community Discussion
No community discussion yet for this question.