CrowdStrike
CCFH-202B · Question #65
When searching for all events related to a specific process which field(s) should be selected in a query from the Event Actions drop down menu?
The correct answer is C. Both TargetProcessId_decimal and ContextProcessId_decimal. You've hit your limit · resets 12:50am (America/New_York)
Event Search and Query Construction
Question
When searching for all events related to a specific process which field(s) should be selected in a query from the Event Actions drop down menu?
Options
- AContextProcessId_decimal
- Btimestamp
- CBoth TargetProcessId_decimal and ContextProcessId_decimal
- DTargetProcessId_decimal
How the community answered
(47 responses)- A4% (2)
- C94% (44)
- D2% (1)
Explanation
You've hit your limit · resets 12:50am (America/New_York)
Topics
#Event Actions#TargetProcessId#ContextProcessId#process search
Community Discussion
No community discussion yet for this question.