nerdexam
CrowdStrike

CCFH-202B · Question #54

Which of the following is a recommended technique to find unique outliers among a set of data in the Falcon Event Search?

The correct answer is B. Stacking (Frequency Analysis). Stacking (Frequency Analysis) is a recommended technique to find unique outliers among a set of data in the Falcon Event Search. As explained above, stacking involves grouping events by a common attribute and counting their frequency, then sorting them by ascending or…

Falcon Event Search

Question

Which of the following is a recommended technique to find unique outliers among a set of data in the Falcon Event Search?

Options

  • AHunt-and-Peck Search Methodology
  • BStacking (Frequency Analysis)
  • CTime-based Searching
  • DMachine Learning

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    92% (23)
  • C
    4% (1)

Explanation

Stacking (Frequency Analysis) is a recommended technique to find unique outliers among a set of data in the Falcon Event Search. As explained above, stacking involves grouping events by a common attribute and counting their frequency, then sorting them by ascending or descending order to identify rare or common events. This can help find anomalies or deviations from normal behavior that could indicate malicious activity. Hunt-and-Peck Search Methodology, Time-based Searching, and Machine Learning are not specific techniques to find unique outliers among a set

Topics

#stacking#frequency analysis#outlier detection#Falcon Event Search

Community Discussion

No community discussion yet for this question.

Full CCFH-202B Practice