Free Preparation Discussions
MENU
CrowdStrike Exam CCFH-202 Topic 6 Question 17 Discussion
Topic #: 6
The help desk is reporting an increase in calls related to user accounts being locked out over the last few days. You suspect that this could be an attack by an adversary against your organization. Select the best hunting hypothesis from the following:
The Hunting and Investigation guide contains example Event Search queries useful for threat hunting. These queries are based on common threat hunting use cases and scenarios, such as finding suspicious processes, network connections, registry activity, etc. The guide also explains how to customize and modify the queries to suit different needs and environments. The guide does not contain a list of all event types and their syntax, as that information is provided in the Events Data Dictionary. The guide also does not contain example Event Search queries useful for Falcon platform configuration, as that is not the focus of the guide.
Barb
3 months agoGilbert
3 months agoJovita
1 months agoBeckie
2 months agoKarol
2 months agoJanessa
2 months agoLeontine
3 months agoLourdes
2 months agoSlyvia
2 months agoDerick
2 months agoEmilio
3 months agoDorothy
2 months agoDean
2 months agoSalena
2 months agoHuey
2 months agoSheridan
3 months agoCristina
3 months agoKrissy
3 months agoMarti
4 months agoElza
4 months agoLakeesha
4 months ago