QuestionQ87Verified/Detection AnalysisCopy linkReport a problemAsk AstroTutorSave questionWhich action helps detect a file infection across the enterprise?AUtilize the IP addresses Investigate dashboard to find the hosts processes that are connecting to an unusual IPBMonitor the Falcon Console for alerts on suspicious process activityCUtilize CrowdStrike Query Language (CQL) to search for files with specific hashes or attributesDAnalyze the Investigate Host dashboard to identify endpoints with high-risk file activityShow AnswerAnswerExplanationCrowdStrike Query Language (CQL) can search environment-wide telemetry for files matching specific hashes or attributes, enabling identification of endpoints affected by the same malicious file.Show comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion