Câu 20: CCFH-202B: CrowdStrike Certified Falcon Hunter
While performing triage on a detection, you notice an event with the name SyntheticProcessRollup2. What conclusion can be made about this event?
Nội dung câu hỏi
While performing triage on a detection, you notice an event with the name SyntheticProcessRollup2. What conclusion can be made about this event?
Các lựa chọn
Đáp án được giữ gọn theo nhãn A, B, C, D trong phần bình chọn tương tác.
- A. The event was generated for a process which is not built-in to the host's Operating System
- B. The event was generated for a process which started before the sensor did — đáp án hiện tại
- C. The event was generated to provide context on process injection techniques being used on the host
- D. The event was generated as a result of a critical detection
Cộng đồng
0 bình luận công khai. Tên thành viên được ẩn một phần.
Chưa có bình luận. Mở giao diện tương tác để bắt đầu thảo luận.