AnswerB
ExplanationAccording to theCrowdStrike Falcon Devices Add-on for Splunk Installation and Configuration Guide v3.1.5+, the Process Timeline search returns all cloudable events associated with a given process, such as process creation, network connections, file writes, registry modifications, etc1.This allows you to see a comprehensive view of what a process was doing on a host1.