CrowdStrike
CCFH-202B · Question #78
Which event_simpleName has a field that contains the command line used to create a process?
The correct answer is A. ProcessRollup2. You've hit your limit · resets 12:50am (America/New_York)
Event Search and Query Construction
Question
Which event_simpleName has a field that contains the command line used to create a process?
Options
- AProcessRollup2
- BDNSRequest
- CCommandHistory
- DPeVersionInfo
How the community answered
(19 responses)- A95% (18)
- C5% (1)
Explanation
You've hit your limit · resets 12:50am (America/New_York)
Topics
#ProcessRollup2#event_simpleName#command line#process creation
Community Discussion
No community discussion yet for this question.