CCFA: CrowdStrike Certified Falcon Administrator

CrowdStrike Falcon Fusion workflows are initiated automatically by either an event in the Falcon environment or a configured recurring schedule. Conditions and actions are workflow stages, and incidents or detections are examples of event-based inputs rather than the complete trigger categories.