CrowdStrike

CCFH-202B · Question #87

When looking at a detection's details, you can pivot to an Event Search. What is the purpose of this Event Search?

The correct answer is A. It takes you to the event data related to the detection and provides you with a number of Event. You've hit your limit · resets 12:50am (America/New_York)

Falcon Detection Investigation

Question

When looking at a detection's details, you can pivot to an Event Search. What is the purpose of this Event Search?

Options

AIt takes you to the event data related to the detection and provides you with a number of Event
BIt provides chronological list of all the event data for the host
CIt allows the analyst to view the full detection details
DIt takes you to the Event Search and shows a +/-10-minute window of events

How the community answered

(25 responses)

A
88% (22)
C
8% (2)
D
4% (1)

Explanation

You've hit your limit · resets 12:50am (America/New_York)

Topics

#detection pivot#Event Search#investigation workflow#detection context

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full CCFH-202B Practice