CCFH-202B: CrowdStrike Certified Falcon Hunter

By CrowdStrike · Question Mode

QuestionQ44

VerifiedEvent Search

You are investigating an alert for a process that connected to the following suspicious domain: reallysuspiciousdomain[.]com.

Which Investigate dashboard provides a list of processes that looked up the specified domain?

Explanation

The Bulk domains dashboard searches domain-related activity and identifies the processes that performed lookups for the specified domain.

Community Discussion

No comments yet. Be the first to start the discussion!