CCFA-200B: CrowdStrike Certified Falcon Administrator

Disabling detections for a host immediately removes that host’s detections from the Falcon console and suppresses future console detections until detection reporting is re-enabled. The underlying historical detection data can remain available in Event Search and be restored to the console when detections are enabled again.