CCFH-202B · Question #54
Which of the following is a recommended technique to find unique outliers among a set of data in the Falcon Event Search?
The correct answer is B. Stacking (Frequency Analysis). Stacking (Frequency Analysis) is a recommended technique to find unique outliers among a set of data in the Falcon Event Search. As explained above, stacking involves grouping events by a common attribute and counting their frequency, then sorting them by ascending or…
Question
Which of the following is a recommended technique to find unique outliers among a set of data in the Falcon Event Search?
Options
- AHunt-and-Peck Search Methodology
- BStacking (Frequency Analysis)
- CTime-based Searching
- DMachine Learning
How the community answered
(25 responses)- A4% (1)
- B92% (23)
- C4% (1)
Explanation
Stacking (Frequency Analysis) is a recommended technique to find unique outliers among a set of data in the Falcon Event Search. As explained above, stacking involves grouping events by a common attribute and counting their frequency, then sorting them by ascending or descending order to identify rare or common events. This can help find anomalies or deviations from normal behavior that could indicate malicious activity. Hunt-and-Peck Search Methodology, Time-based Searching, and Machine Learning are not specific techniques to find unique outliers among a set
Topics
Community Discussion
No community discussion yet for this question.