CrowdStrike implements a specific framework within the Falcon console to help responders categorize detections based on the adversary's ultimate goals and the technical means used to achieve them. This classification system, which maps activity to known industry standards, is known as the:

In the 'User Search - File Written' section, a responder can see various files dropped by a user. Which of the following file types CANNOT be seen from this view?

Responders use 'IP Search' to track connections to malicious infrastructure. Which of the following statements about the IP Search is FALSE?

A responder wants to verify why a certain quarantined file was not uploaded to the cloud. Which specific policy dictates whether quarantined files are permitted to be uploaded?

When a responder needs to take data out of the Falcon console for external analysis, which of the following is NOT an option when exporting searches?