Which Real Time Response role will allow you to see all analyst session details?

Question

Options

• AReal Time Response - Read-Only Analyst
• BNone of the Real Time Response roles allows this
• CReal Time Response -Active Responder
• DReal Time Response -Administrator

• A
  3% (1)
• C
  3% (1)
• D
  93% (28)

Explanation

The Real Time Response role that will allow you to see all analyst session details is Real Time Response -Administrator. A Real Time Response -Administrator is a role that has full access and control over the Real Time Response feature in Falcon, which allows you to remotely access and investigate hosts in real time. A Real Time Response -Administrator can view all analyst session details, such as session ID, host name, start and end time, commands executed, and output received. A Real Time Response -Administrator can also create, modify, delete, and assign scripts and commands to other analysts.

No community discussion yet for this question.