Free Preparation Discussions
MENU
CrowdStrike Exam CCFH-202 Topic 6 Question 17 Discussion
Topic #: 6
The help desk is reporting an increase in calls related to user accounts being locked out over the last few days. You suspect that this could be an attack by an adversary against your organization. Select the best hunting hypothesis from the following:
The Hunting and Investigation guide contains example Event Search queries useful for threat hunting. These queries are based on common threat hunting use cases and scenarios, such as finding suspicious processes, network connections, registry activity, etc. The guide also explains how to customize and modify the queries to suit different needs and environments. The guide does not contain a list of all event types and their syntax, as that information is provided in the Events Data Dictionary. The guide also does not contain example Event Search queries useful for Falcon platform configuration, as that is not the focus of the guide.
Barb
28 days agoGilbert
29 days agoBeckie
5 days agoKarol
10 days agoJanessa
14 days agoLeontine
1 months agoLourdes
3 days agoSlyvia
6 days agoDerick
8 days agoEmilio
2 months agoDorothy
4 days agoDean
6 days agoSalena
17 days agoHuey
18 days agoSheridan
29 days agoCristina
1 months agoKrissy
2 months agoMarti
2 months agoElza
2 months agoLakeesha
2 months ago