CCFA: CrowdStrike Certified Falcon Administrator

By CrowdStrike · Question Mode

QuestionQ7

VerifiedRule Configuration

Which of the following lists everything that can be configured to alert as a Custom IOC (Indicator of Compromise) in IOC Management?

Explanation

Custom IOCs in CrowdStrike Falcon IOC Management can use file hashes, domain names, and IP addresses as indicators. Filenames are not a Custom IOC indicator type.

Community Discussion

No comments yet. Be the first to start the discussion!