What kind of activity does a User Search help you investigate?

The correct answer is B. A list of process activity executed by the specified user account. User Search is an Investigate tool that helps you investigate a list of process activity executed by the specified user account. It shows information such as process name, command line, parent process name, parent command line, etc. for each process that was executed by the…

Falcon Investigate Tools

Question

Options

AA history of Falcon Ul logon activity
BA list of process activity executed by the specified user account
CA count of failed user logon activity
DA list of DNS queries by the specified user account

How the community answered

(32 responses)

A
3% (1)
B
88% (28)
C
3% (1)
D
6% (2)

Explanation

User Search is an Investigate tool that helps you investigate a list of process activity executed by the specified user account. It shows information such as process name, command line, parent process name, parent command line, etc. for each process that was executed by the user account on any host in your environment. It does not show a history of Falcon UI logon activity, a count of failed user logon activity, or a list of DNS queries by the specified user account.

Topics

#User Search#process activity#user account investigation

Community Discussion

No community discussion yet for this question.

Full CCFH-202B Practice