When examining raw event data, what is the purpose of the field called ParentProcessld_decimal?
In the Falcon console, detections can be automated or manual. Which of the following options represents a manual detection?
You are reviewing the raw data in an event search from a detection tree. You find a FileOpenlnfo event and want to find out if any other files were opened by the responsible process. Which two field values do you need from this event to perform a Process Timeline search?
Detections in Falcon are classified by their origin. Which of the following is NOT a recognized type of detection?
When using ' User Search ' to investigate a potentially compromised account, which of the following is NOT a filter available in the User Search?
What is the difference between Managed and Unmanaged Neighbors in the Falcon console?
In the Hash Search tool, which of the following is listed under Process Executions?
Which Executive Summary dashboard item indicates sensors running with unsupported versions?
A responder needs to view a high-level overview of the environment ' s security posture. Where can they find the ' Activity Dashboard ' ?
A responder is using ' Host Search ' to gather baseline data on a machine. Which of the following pieces of information is NOT provided by the Host Search results?
