CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ67

VerifiedDashboards and Reports

You need to export a list of every detection for a particular Host Name from the last 24 hours. What is the best method for doing this?

Explanation

The Investigate module’s Detection Activity page supports filtering detection records by host name and time range, and exporting the filtered results. This directly produces the requested hostname-specific list for the prior 24-hour period.

Community Discussion

No comments yet. Be the first to start the discussion!