CCFH-202B: CrowdStrike Certified Falcon Hunter

By CrowdStrike · Question Mode

QuestionQ68

VerifiedEvent Search

What can a hunter append to the end of a search string in Advanced Event Search to identify outliers while quantifying the results?

Explanation

groupBy() aggregates matching events according to specified field values and reports their occurrence counts. Those counts enable frequency analysis, making unusually common or rare values stand out as outliers.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!