What elements are required to properly execute a Process Timeline?

The correct answer is A. Agent ID (AID) and Target Process ID. The Agent ID (AID) and the Target Process ID are the elements that are required to properly execute a Process Timeline. The Agent ID (AID) is a unique identifier for each host that has a Falcon sensor installed. The Target Process ID is the decimal representation of the process…

Falcon Investigate Tools

Question

Options

AAgent ID (AID) and Target Process ID
BAgent ID (AID) only
CHostname and Local Process ID
DTarget Process ID only

How the community answered

(50 responses)

A
90% (45)
B
6% (3)
C
2% (1)
D
2% (1)

Explanation

The Agent ID (AID) and the Target Process ID are the elements that are required to properly execute a Process Timeline. The Agent ID (AID) is a unique identifier for each host that has a Falcon sensor installed. The Target Process ID is the decimal representation of the process identifier for the process that you want to investigate. These two elements are used to query the cloud for the events related to the process on the host. The Agent ID (AID) only, the Hostname and Local Process ID, and the Target Process ID only are not sufficient to execute a Process

Topics

#Process Timeline#Agent ID#Target Process ID#required parameters

Community Discussion

No community discussion yet for this question.

Full CCFH-202B Practice