Event workflows are automated searches that can be used to pivot between related events and searches. To use a workflow, click the Event Actions button at the bottom of the JSON for any raw event
the other sources also say B but the CrowdStrike pdfs list event actions as pivot from an Event Search so this goes more with A. they are hyperlinks to automated searches so not sure but i am choosing A until otherwise i get new info
Appears to be A as Event actions aren't necessarily only available in host search
upvoted 3 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
3ffa7f1
5 months, 1 week agosbag0024
9 months, 2 weeks agoPipo12345
11 months agoChiquitabandita
11 months, 2 weeks agoJimmy390
12 months ago