CrowdStrike
CCFR-201B · Question #68
User Search can help correlate suspicious behavior by showing all of the following except:
The correct answer is B. Group policies applied to the user. You've hit your limit · resets 12:50am (America/New_York)
Threat Investigation and Search
Question
User Search can help correlate suspicious behavior by showing all of the following except:
Options
- AProcesses launched by the user
- BGroup policies applied to the user
- CDetection events involving the user
- DHostnames where the user has logged in
How the community answered
(23 responses)- A4% (1)
- B91% (21)
- C4% (1)
Explanation
You've hit your limit · resets 12:50am (America/New_York)
Topics
#User Search#user activity correlation#search scope#detection events
Community Discussion
No community discussion yet for this question.