Câu 23: CCFH-202: CrowdStrike Certified Falcon Hunter

When performing a raw event search via the Events search page, what are Event Actions?

1. A. Event Actions contains an audit information log of actions an analyst took in regards to a specific detection.
2. B. Event Actions contains the summary of actions taken by the Falcon sensor such as quarantining a file, prevent a process from executing or taking no actions and creating a detection only.
3. C. Event Actions are pivotable workflows including connecting to a host, pre-made event searches and pivots to other investigatory pages such as host search. — đáp án hiện tại
4. D. Event Actions is the field name that contains the event name defined in the Events Data Dictionary such as ProcessRollup, SyntheticProcessRollup, DNS request, etc.