CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ167

VerifiedDashboards and Reports

Which log would you use to investigate unusual activity involving a script that interfaces with the Falcon platform?

Explanation

API audit logs record activity performed through the Falcon platform’s APIs, including actions initiated by scripts or other programmatic integrations.

Community Discussion

No comments yet. Be the first to start the discussion!