CCFH-202B: CrowdStrike Certified Falcon Hunter

By CrowdStrike · Question Mode

QuestionQ82

VerifiedReports and References

During an investigation, you identify a Falcon host that is connecting from a country outside those where you normally conduct business.

Which built-in report displays Falcon hosts connecting from that country?

Explanation

The Geo location activity report presents Falcon host connection activity by geographic location, allowing investigation of hosts connecting from a particular country.

Community Discussion

No comments yet. Be the first to start the discussion!