CCFH-202B: CrowdStrike Certified Falcon Hunter

test(executionCount < 10) applies the threshold that identifies unusually infrequent execution groups, filtering for counts below 10. In Falcon LogScale, test() evaluates a Boolean expression and filters results when that expression is true.