CCFH-202B: CrowdStrike Certified Falcon Hunter

By CrowdStrike · Question Mode

QuestionQ4

VerifiedEvent Search

You have created an Advanced Event Search query to identify suspicious PowerShell usage and want to show its results on a dashboard.

How can you display this query in a dashboard?

Explanation

CrowdStrike Falcon custom dashboards can display Advanced Event Search output by creating a customized dashboard widget from the search query. A saved search, scheduled search, or scheduled workflow serves a different purpose and does not directly add the query results to a dashboard.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!