After running an Event Search, you can select many Event Actions depending on your results. Which of the following is NOT an option for any Event Action?

To track the relationship between a parent and its child, Falcon uses specific ID fields. What raw data is used as the 'ParentProcessId_decimal' when a process spawns a child process?

Which of the following sentences best describes the technical visibility provided by the 'Host Timeline' view?

In various telemetry events like 'FileWrite' or 'NetworkConnect', Falcon identifies the process that performed the action. Which field will always identify this "acting" process?

The Falcon sensor can automatically upload quarantined files to the CrowdStrike Cloud for further analysis.
What is the maximum size allowed for a quarantined file to be uploaded?