CrowdStrike Exam CCFH-202 Topic 7 Question 8 Discussion

Actual exam question for CrowdStrike's CCFH-202 exam

Question #: 8
Topic #: 7

[All CCFH-202 Questions]

Which tool allows a threat hunter to populate and colorize all known adversary techniques in a single view?

AMISP

BOWASP Threat Dragon

COpenXDR

DMITRE ATT&CK Navigator

Show Suggested Answer

Suggested Answer: D

The Process Timeline Link is what you click to jump to a Process Timeline from many pages in Falcon, such as a Hash Search. The Process Timeline Link is an icon that looks like three horizontal bars with dots on them. It appears next to each process name or ID on various pages in Falcon, such as Hash Search results, Detection details, Event Search results, etc. Clicking on it will open a new tab with the Process Timeline for that process. The PID, the Process ID or Parent Process ID, and the CID are not what you click to jump to a Process Timeline.

by Rozella at Jul 27, 2023, 08:40 PM

Limited Time Offer

25%

Off

Get Premium CCFH-202 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Herminia

1 months ago

Hold up, is the MITRE ATT&CK Navigator the one with the funky dance moves? I heard it's a real crowd-pleaser at cybersecurity parties.

upvoted 0 times

Jodi

10 days ago

User 1: No, the MITRE ATT&CK Navigator is not a dancer. It's a tool for threat hunting.

upvoted 0 times

...

Lenna

2 months ago

MISP? More like 'MISS' the correct answer, am I right? The MITRE ATT&CK Navigator is clearly the way to go.

upvoted 0 times

Tesha

12 days ago

I agree, the MITRE ATT&CK Navigator is definitely the best tool for threat hunting.

upvoted 0 times

...

Ngoc

15 days ago

I've heard great things about OpenXDR as well, but the MITRE ATT&CK Navigator seems to be the top choice.

upvoted 0 times

...

Eleonora

19 days ago

Yeah, MISP doesn't compare to the capabilities of the MITRE ATT&CK Navigator.

upvoted 0 times

...

Daron

1 months ago

I agree, the MITRE ATT&CK Navigator is definitely the best tool for threat hunting.

upvoted 0 times

...

Colene

2 months ago

OpenXDR? Is that some kind of exotic bird? I think I'll stick with the MITRE ATT&CK Navigator.

upvoted 0 times

...

Emily

2 months ago

OWASP Threat Dragon? Sounds like a fun name, but I doubt it can do what the question is asking.

upvoted 0 times

Roslyn

2 days ago

Yeah, OWASP Threat Dragon may sound fun, but it's not the right tool for this task.

upvoted 0 times

...

Glennis

16 days ago

I've heard of MISP as well, but I think D) MITRE ATT&CK Navigator is the best option for this.

upvoted 0 times

...

Man

1 months ago

I agree, MITRE ATT&CK Navigator is the tool that allows threat hunters to visualize adversary techniques.

upvoted 0 times

...

Truman

2 months ago

I think the answer is D) MITRE ATT&CK Navigator.

upvoted 0 times

...

Nobuko

2 months ago

I'm not sure, but I think C) OpenXDR could also be a possible answer.

upvoted 0 times

...

Georgiann

2 months ago

I agree with Lonna, MITRE ATT&CK Navigator is the tool that allows threat hunters to view adversary techniques.

upvoted 0 times

...

Micheal

2 months ago

The MITRE ATT&CK Navigator seems like the perfect tool for that! I can't wait to try it out.

upvoted 0 times

Johanna

29 days ago

I agree, I'm excited to give it a try.

upvoted 0 times

...

Lashawnda

1 months ago

That sounds like a great tool to have for threat hunting.

upvoted 0 times

...

Miesha

2 months ago

Yes, it allows you to see all known adversary techniques in one view.

upvoted 0 times

...

Lorrie

2 months ago

I heard the MITRE ATT&CK Navigator is really helpful for threat hunting.

upvoted 0 times

...

Lonna

2 months ago

I think the answer is D) MITRE ATT&CK Navigator.

upvoted 0 times

...