QuestionQ71

VerifiedEvent Search

You are investigating an alert for a process that connected to the suspicious domain, reallysuspiciousdomain[.]com.

Which Investigate dashboard would provide a list of processes that looked up the specified domain?

Explanation

The Bulk Domains dashboard searches for specified domain names and returns the processes that performed DNS lookups for those domains.

Community Discussion

No comments yet. Be the first to start the discussion!