Free Preparation Discussions
MENU
CrowdStrike Exam CCFH-202 Topic 6 Question 17 Discussion
Topic #: 6
The help desk is reporting an increase in calls related to user accounts being locked out over the last few days. You suspect that this could be an attack by an adversary against your organization. Select the best hunting hypothesis from the following:
The Hunting and Investigation guide contains example Event Search queries useful for threat hunting. These queries are based on common threat hunting use cases and scenarios, such as finding suspicious processes, network connections, registry activity, etc. The guide also explains how to customize and modify the queries to suit different needs and environments. The guide does not contain a list of all event types and their syntax, as that information is provided in the Events Data Dictionary. The guide also does not contain example Event Search queries useful for Falcon platform configuration, as that is not the focus of the guide.
Barb
12 days agoGilbert
14 days agoLeontine
20 days agoEmilio
1 months agoSalena
2 days agoHuey
3 days agoSheridan
14 days agoCristina
19 days agoKrissy
1 months agoMarti
2 months agoElza
2 months agoLakeesha
2 months ago