CCFA-200B: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ21

VerifiedUser Management

A member of your SECOPS team is creating custom scripts for RTR, but cannot save or share them in Falcon.

Which additional role do they need to accomplish this?

Explanation

The Real Time Response – Administrator role grants the administrative capability to manage custom RTR scripts, including saving them for shared use in Falcon. CrowdStrike’s Real Time Response Admin service is specifically responsible for managing RTR administrator commands and custom scripts.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!