CCFA-200B: CrowdStrike Certified Falcon Administrator

Falcon machine-learning exclusions are defined by an exclusion pattern written in glob syntax. The pattern targets the file path, the file name, or the file type (extension) of the files to exclude from machine-learning detections. Triggers, actions and alerts belong to IOA exclusions and workflows, and parameters, operators and values describe query syntax rather than exclusion patterns.