Where would an analyst find information about shells spawned by root, Kernel Module loads, and wget/curl usage?

Question

Options

• ASensor Health report
• BLinux Sensor report
• CSensor Policy Daily report
• DMac Sensor report

• A
  6% (3)
• B
  91% (48)
• C
  2% (1)
• D
  2% (1)

Explanation

The Linux Sensor report is where an analyst would find information about shells spawned by root, Kernel Module loads, and wget/curl usage. The Linux Sensor report is a pre-defined report that provides a summary view of selected activities on Linux hosts. It shows information such as process execution events, network connection events, file write events, etc. that occurred on Linux hosts within a specified time range. The Sensor Health report, the Sensor Policy Daily report, and the Mac Sensor report do not provide the same information.

No community discussion yet for this question.