CCFH-202B: CrowdStrike Certified Falcon Hunter

By CrowdStrike · Question Mode

QuestionQ75

VerifiedEvent Search

During an event search, you observe that an explorer.exe process spawns a cmd.exe process. What is the process relationship between these two processes?

Explanation

When explorer.exe spawns cmd.exe, explorer.exe is the parent process and cmd.exe is the child process. The child process’s ParentProcessID matches the parent process’s TargetProcessID.

Community Discussion

No comments yet. Be the first to start the discussion!