CrowdStrike
CCFR-201B · Question #23
After running an Event Search, you can select many Event Actions depending on your results. Which of the following is NOT an option for any Event Action?
The correct answer is C. Show a Process Timeline for the responsible process. You've hit your limit · resets 12:50am (America/New_York)
Event Search and Analysis
Question
After running an Event Search, you can select many Event Actions depending on your results. Which of the following is NOT an option for any Event Action?
Options
- ADraw Process Explorer
- BShow a +/- 10-minute window of events
- CShow a Process Timeline for the responsible process
- DShow Associated Event Data (from TargetProcessId_decimal or ContextProcessId decimal)
How the community answered
(17 responses)- C94% (16)
- D6% (1)
Explanation
You've hit your limit · resets 12:50am (America/New_York)
Topics
#Event Search#Event Actions#Process Explorer#process timeline
Community Discussion
No community discussion yet for this question.