One of your development teams is working on code for a new enterprise application but Falcon continually flags the execution as a detection during testing. All development work is required to be stored on a file share in a folder called "devcode." What setting can you use to reduce false positives on this file path?

You have an existing workflow that is triggered on a critical detection that sends an email to the escalation team. Your CISO has asked to also be notified via email with a customized message. What is the best way to update the workflow?

You want to create a detection-only policy. How do you set this up in your policy's settings?

What impact does disabling detections on a host have on an API?

Where do you obtain the Windows sensor installer for CrowdStrike Falcon?