Question 41

When examining a detection process tree, several fields are provided to give context. Which of the following is NOT included in the standard fields of a detection process tree?
  • Question 42

    From the Detections page, how can you view 'in-progress' detections assigned to Falcon Analyst Alex?
  • Question 43

    Responders must understand the limitations and capabilities of custom rules. Which of the following statements about custom IOAs is FALSE?
  • Question 44

    What information does the MITREATT AND CKFramework provide?
  • Question 45

    A responder releases a file from quarantine on a specific workstation. What is the default scope of the allowlist that is created during this process?