CrowdStrike
CCFR-201B · Question #24
From a detection, what is the fastest way to see children and sibling process information?
Sign in or unlock CCFR-201B to reveal the answer and full explanation for question #24. The question stem and answer options stay visible for context.
Detection Investigation
Question
From a detection, what is the fastest way to see children and sibling process information?
Options
- ASelect the Event Search option. Then from the Event Actions, select Show Associated Event Data
- BSelect Full Detection Details from the detection
- CRight-click the process and select "Follow Process Chain"
- DSelect the Process Timeline feature, enter the AID, Target Process ID, and Parent Process ID
Unlock CCFR-201B to see the answer
You've previewed enough free CCFR-201B questions. Unlock CCFR-201B for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Full Detection Details#process tree#sibling processes#detection navigation