CCFH-202B: CrowdStrike Certified Falcon Hunter

An internally compiled file may contain proprietary code, so it should be analyzed in a private sandbox rather than submitted to a public one. If the behavior is verified as legitimate and expected, a Machine Learning exclusion is the appropriate exception because the prevention originated from Falcon Machine Learning; an Indicator of Attack exclusion applies to a different detection mechanism.