CrowdStrike
CCFH-202B · Question #43
The Falcon Detections page will attempt to decode Encoded PowerShell Command line parameters when which PowerShell Command line parameter is present?
The correct answer is C. -e. Powershell "-e" indicates that the following command fragment is "encoded".
Falcon Platform Investigation
Question
The Falcon Detections page will attempt to decode Encoded PowerShell Command line parameters when which PowerShell Command line parameter is present?
Options
- A-Command
- B-Hidden
- C-e
- D-nop
How the community answered
(23 responses)- B9% (2)
- C87% (20)
- D4% (1)
Explanation
Powershell "-e" indicates that the following command fragment is "encoded".
Topics
#PowerShell#encoded commands#Falcon Detections#command line parameters
Community Discussion
No community discussion yet for this question.