CCFA-200B: CrowdStrike Certified Falcon Administrator

Script-based execution visibility provides Falcon sensor visibility into suspicious scripts and scripting-language content on supported Windows hosts; it is the control used to inspect script execution. Suspicious Scripts and Commands is a separate execution-blocking control that relies on Interpreter-Only and/or Script-Based Execution Monitoring visibility.