Which of the following is a recommended technique to find unique outliers among a set of data in the Falcon Event Search?
This is the difference between a Host Search and a Host Timeline. A Host Search is an Investigate tool that allows you to view events by category, such as process executions, network connections, file writes, etc. A Host Timeline is an Investigate tool that allows you to view all events in chronological order, without any categorization. Both tools can be used for detection investigation and proactive hunting, depending on the use case and preference. You can access a Host Search from a detection or manually enter the host details. You can also populate the Host Timeline fields manually or from other pages in Falcon.
Cordell
1 months agoLeota
12 days agoTy
1 months agoRenato
8 days agoLillian
16 days agoDestiny
2 months agoMarta
13 days agoWhitley
1 months agoVivienne
2 months agoJina
2 months agoAlishia
4 days agoTiffiny
13 days agoJulian
14 days agoRosita
1 months agoKanisha
1 months agoMargot
1 months agoKirk
2 months agoErick
2 months agoGussie
2 months ago