QuestionQ45Verified/Dashboards and ReportsCopy linkReport a problemAsk AstroTutorSave questionWhat details are available in the Real Time Response (RTR) Audit Log?AIP Address, Prevention Policy, recent detections, and host group assignmentBSession end time, command return results, and file activityCSession start time, duration, user, hostname, commands used, and retrieved filesDReal Time Response (RTR) information is not collected via audit logsShow AnswerAnswerExplanationRTR audit logging provides an accountability record of RTR sessions, including session timing, the user and target hostname, command activity, and files obtained during the session. The Real Time Response Audit API supports retrieving RTR sessions and, when requested, their command information.Learn moreCrowdStrike Developer: Real Time Response AuditShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion