Question 41
When examining a detection process tree, several fields are provided to give context. Which of the following is NOT included in the standard fields of a detection process tree?
Question 42
From the Detections page, how can you view 'in-progress' detections assigned to Falcon Analyst Alex?
Question 43
Responders must understand the limitations and capabilities of custom rules. Which of the following statements about custom IOAs is FALSE?
Question 44
What information does the MITREATT AND CKFramework provide?
Question 45
A responder releases a file from quarantine on a specific workstation. What is the default scope of the allowlist that is created during this process?
