CCSE: CrowdStrike Certified SIEM Engineer

By CrowdStrike · Question Mode

QuestionQ31

VerifiedParsing and Normalization

When configuring a data connector, which parser can transform incoming data into searchable events that activate detections in Next-Gen SIEM?

Explanation

CPS-compliant parsers use CrowdStrike Query Language (CQL) scripts to transform incoming data into searchable events that can trigger detections in Next-Gen SIEM.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!