Question 46
If the Falcon sensor identifies suspicious behavioral patterns-such as a process attempting to dump memory from lsass.exe-what specific type of detection will be generated?
Question 47
An analyst needs to quickly view the activity surrounding a suspicious process. Which of the following sequences of steps will pivot to an auto-filled process timeline in the Falcon UI?
Question 48
Which statement is TRUE regarding the "Bulk Domains" search?
Question 49
You are tasked with remediating adware for a host using a custom script via Real Time Response (RTR).
When running the script, you get an error that the script is timing out.
How can you resolve this issue?
When running the script, you get an error that the script is timing out.
How can you resolve this issue?
Question 50
To maintain a logical flow during an incident post-mortem, CrowdStrike recommends describing adversary activity using a specific three-part sentence structure. Which combination best completes this sentence: "The adversary was trying to [1], by [2], using [3]"?