CrowdStrike
CCFR-201B · Question #24
From a detection, what is the fastest way to see children and sibling process information?
The correct answer is B. Select Full Detection Details from the detection. Right click gives you basic web/OS options, nothing application specific. This is more appropriate since the details and tree are provided with full details.
Detection Investigation
Question
From a detection, what is the fastest way to see children and sibling process information?
Options
- ASelect the Event Search option. Then from the Event Actions, select Show Associated Event Data
- BSelect Full Detection Details from the detection
- CRight-click the process and select "Follow Process Chain"
- DSelect the Process Timeline feature, enter the AID, Target Process ID, and Parent Process ID
How the community answered
(46 responses)- A2% (1)
- B91% (42)
- C4% (2)
- D2% (1)
Explanation
Right click gives you basic web/OS options, nothing application specific. This is more appropriate since the details and tree are provided with full details.
Topics
#Full Detection Details#process tree#sibling processes#detection navigation
Community Discussion
No community discussion yet for this question.