CCFH-202B: CrowdStrike Certified Falcon Hunter

By CrowdStrike · Question Mode

QuestionQ24

VerifiedSearch and Investigation Tools

You have received a detection and want to start analyzing the triggering file in the Process Timeline dashboard.

What is required to run the search?

Explanation

A Process Timeline search requires the target process ID to identify the process whose related events should be returned. The host’s AID is also required, but it is not one of the available choices.

Community Discussion

No comments yet. Be the first to start the discussion!