nerdexam
CrowdStrike

CCFR-201B · Question #1

What are Event Actions?

The correct answer is A. Automated searches that can be used to pivot between related events and searches. Event workflows are automated searches that can be used to pivot between related events and searches. To use a workflow, click the Event Actions button at the bottom of the JSON for any

Falcon Platform Navigation and Search

Question

What are Event Actions?

Options

  • AAutomated searches that can be used to pivot between related events and searches
  • BPivotable hyperlinks available in a Host Search
  • CCustom event data queries bookmarked by the currently signed in Falcon user
  • DRaw Falcon event data

How the community answered

(43 responses)
  • A
    91% (39)
  • B
    2% (1)
  • C
    5% (2)
  • D
    2% (1)

Explanation

Event workflows are automated searches that can be used to pivot between related events and searches. To use a workflow, click the Event Actions button at the bottom of the JSON for any

Topics

#Event Actions#event pivoting#Falcon console#search automation

Community Discussion

No community discussion yet for this question.

Full CCFR-201B Practice