A.the account type for the user (e.g. Domain Administrator, Local User)

B.the last time the user's password was set

C.the logon type (e.g. interactive, service)

D.all hosts the user logged into

A.This is not necessary; you simply select "All Time" in your query to search all data

B.You will not be able to search event data into the past beyond your retention period

C.Your query will require you to specify the data pool associated with the date you wish to search

D.Data such as process records are kept for a shorter time than event data

A.Only the options to "Detect/Block" and/or "File Extraction" can be changed

B.Only the selected groups and hosts to which the exclusion is applied can be changed

C.All parts of the exclusion can be changed

D.The exclusion pattern cannot be changed

A.Workflow Audit log

B.Custom Alert History

C.Workflow Execution log

D.Falcon UI Audit Trail

A.Minimal

B.Cautious

C.Aggressive

D.Moderate