CCFH-202B: CrowdStrike Certified Falcon Hunter

By CrowdStrike · Question Mode

QuestionQ20

VerifiedReports and References

While conducting an investigation, you find a Falcon host connecting from a country outside those in which you normally conduct business.

Which built-in report shows Falcon hosts connecting from that country?

Explanation

The Global connection heat map report visualizes Falcon-host connections by geographic location, enabling investigation of hosts that communicate with an unexpected country.

Community Discussion

No comments yet. Be the first to start the discussion!