A responder wants to verify why a certain quarantined file was not uploaded to the cloud. Which specific policy dictates whether quarantined files are permitted to be uploaded?
Where are quarantine files located on a Mac Endpoint?
While most searches are accessible from a detection, some require a manual jump. Which search is not available as a direct pivot from a detection?
CrowdStrike supports various deployment types. What is a ' POD sensor ' ?
While in an Event Search, a responder clicks on an event action. What does the ' Show Child Processes ' event action do?
Depending on the subscription level, " Cloudable Events " (standard telemetry) have a specific retention period. What is the minimum period of time that these events are retained?
Which of the following is NOT a valid event type?
What information does the MITRE ATT AND CK Framework provide?
The Falcon sensor can take several automated actions to protect an endpoint. Which of the following is NOT an action that Falcon takes upon detection?
In the Falcon Overwatch Best Practice workflow, at what specific point is a responder encouraged to utilize OSINT (Open Source Intelligence) searches?
