Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CrowdStrike Exam CCFH-202 Topic 9 Question 44 Discussion

Actual exam question for CrowdStrike's CCFH-202 exam
Question #: 44
Topic #: 9
[All CCFH-202 Questions]

What information is provided from the MITRE ATT&CK framework in a detection's Execution Details?

Show Suggested Answer Hide Answer
Suggested Answer: C

Technique ID is the information that is provided from the MITRE ATT&CK framework in a detection's Execution Details. Technique ID is a unique identifier for each technique in the MITRE ATT&CK framework, such as T1059 for Command and Scripting Interpreter or T1566 for Phishing. Technique ID helps to map a detection to a specific adversary behavior and tactic. Grouping Tag, Command Line, and Triggering Indicator are not information that is provided from the MITRE ATT&CK framework in a detection's Execution Details.


Contribute your Thoughts:

Lang
5 days ago
I believe the Command Line is also provided in the Execution Details.
upvoted 0 times
...
Coral
7 days ago
Yes, that's correct. The Technique ID is crucial for understanding the attack.
upvoted 0 times
...
Rebeca
11 days ago
Ah, the MITRE ATT&CK framework, where the details are as plentiful as the acronyms. I'm just going to close my eyes and point, that usually works for me on these exams.
upvoted 0 times
Rosio
1 days ago
A) Grouping Tag
upvoted 0 times
...
...
Izetta
19 days ago
I'm just going to guess 'all of the above' and hope for the best. After all, the more info the better, right? It's not like the MITRE folks would make this too easy or anything.
upvoted 0 times
Elli
5 days ago
A) Grouping Tag
upvoted 0 times
...
...
Larue
22 days ago
Hold up, is this a trick question? What if the answer is actually A) Grouping Tag? That could be useful for categorizing the detection, no?
upvoted 0 times
...
Yuette
24 days ago
I'm going with B) Command Line. That's the juicy stuff we need to know when investigating an execution, isn't it?
upvoted 0 times
...
Cassie
25 days ago
Hmm, I think it's D) Triggering Indicator. That's the key piece of information that would help me understand what triggered the detection, right?
upvoted 0 times
Xuan
2 days ago
It helps to understand what specific action or event triggered the detection.
upvoted 0 times
...
Claribel
7 days ago
Yes, you're correct. The Triggering Indicator is indeed the key piece of information in the Execution Details.
upvoted 0 times
...
...
Beckie
28 days ago
I think the information provided includes the Technique ID.
upvoted 0 times
...
Delmy
1 months ago
I'm pretty sure the answer is C) Technique ID. The MITRE ATT&CK framework provides information about the specific technique used in the detection.
upvoted 0 times
Edward
12 days ago
It's important to know the Technique ID for better understanding of the detection.
upvoted 0 times
...
Leah
23 days ago
Yes, the Technique ID helps identify the specific attack technique used.
upvoted 0 times
...
Denna
25 days ago
I think you're right, the Technique ID is provided in the Execution Details.
upvoted 0 times
...
...

Save Cancel