Question 6

When viewing the main 'Quarantine' dashboard to manage blocked files, which of the following pieces of information CANNOT be seen by default?
  • Question 7

    When using 'User Search' to investigate a potentially compromised account, which of the following is NOT a filter available in the User Search?
  • Question 8

    Responders use 'IP Search' to track connections to malicious infrastructure. Which of the following statements about the IP Search is FALSE?
  • Question 9

    When examining raw event data, what is the purpose of the field called ParentProcessld_decimal?
  • Question 10

    In the Hash Search tool, which of the following is listed under Process Executions?