CCIS: CrowdStrike Certified Identity Specialist

By CrowdStrike · Question Mode

QuestionQ66

VerifiedThreat Hunting and Investigation

Question Image

Using the example detection provided, which statement is TRUE regarding Falcon detections and MITRE ATT&CK Framework TTPs?

Explanation

Falcon detections can represent activity that does not directly map to a MITRE ATT&CK tactic or technique. A detection may therefore have no ATT&CK TTP associated with it.

Community Discussion

No comments yet. Be the first to start the discussion!