nerdexam
CrowdStrike

CCFH-202B · Question #27

What do you click to jump to a Process Timeline from many pages in Falcon, such as a Hash Search?

The correct answer is D. Process Timeline Link. The Process Timeline Link is what you click to jump to a Process Timeline from many pages in Falcon, such as a Hash Search. The Process Timeline Link is an icon that looks like three horizontal bars with dots on them. It appears next to each process name or ID on various pages…

Falcon Investigate Tools

Question

What do you click to jump to a Process Timeline from many pages in Falcon, such as a Hash Search?

Options

  • APID
  • BProcess ID or Parent Process ID
  • CCID
  • DProcess Timeline Link

How the community answered

(21 responses)
  • B
    5% (1)
  • C
    5% (1)
  • D
    90% (19)

Explanation

The Process Timeline Link is what you click to jump to a Process Timeline from many pages in Falcon, such as a Hash Search. The Process Timeline Link is an icon that looks like three horizontal bars with dots on them. It appears next to each process name or ID on various pages in Falcon, such as Hash Search results, Detection details, Event Search results, etc. Clicking on it will open a new tab with the Process Timeline for that process. The PID, the Process ID or Parent Process ID, and the CID are not what you click to jump to a Process Timeline.

Topics

#Process Timeline#Hash Search#Falcon navigation

Community Discussion

No community discussion yet for this question.

Full CCFH-202B Practice