nerdexam
CrowdStrike

CCFR-201B · Question #27

Aside from a Process Timeline or Event Search, how do you export process event data from a detection in .CSV format?

The correct answer is C. In Full Detection Details, you choose the "View Process Activity" option and then export from that. Process Activity shows Event Type data while Process Tree shows Triggering Files.

Detection Investigation

Question

Aside from a Process Timeline or Event Search, how do you export process event data from a detection in .CSV format?

Options

  • AYou can't export detailed event data from a detection, you have to use the Process Timeline or an
  • BIn Full Detection Details, you expand the nodes of the process tree you wish to expand and then
  • CIn Full Detection Details, you choose the "View Process Activity" option and then export from that
  • DFrom the Detections Dashboard, you right-click the event type you wish to export and choose

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    94% (31)

Explanation

Process Activity shows Event Type data while Process Tree shows Triggering Files.

Topics

#Full Detection Details#export CSV#View Process Activity#process event data

Community Discussion

No community discussion yet for this question.

Full CCFR-201B Practice