CrowdStrike
CCFR-201B · Question #1
What are Event Actions?
The correct answer is A. Automated searches that can be used to pivot between related events and searches. Event workflows are automated searches that can be used to pivot between related events and searches. To use a workflow, click the Event Actions button at the bottom of the JSON for any
Falcon Platform Navigation and Search
Question
What are Event Actions?
Options
- AAutomated searches that can be used to pivot between related events and searches
- BPivotable hyperlinks available in a Host Search
- CCustom event data queries bookmarked by the currently signed in Falcon user
- DRaw Falcon event data
How the community answered
(43 responses)- A91% (39)
- B2% (1)
- C5% (2)
- D2% (1)
Explanation
Event workflows are automated searches that can be used to pivot between related events and searches. To use a workflow, click the Event Actions button at the bottom of the JSON for any
Topics
#Event Actions#event pivoting#Falcon console#search automation
Community Discussion
No community discussion yet for this question.