After running an Event Search, you can select many Event Actions depending on your results. Which of the following is NOT an option for any Event Action?
A.
Draw Process Explorer
B.
Show a +/- 10-minute window of events
C.
Show a Process Timeline for the responsible process
D.
Show Associated Event Data (from TargetProcessId_decimal or ContextProcessId decimal)
answer is C, C. Show a Process Timeline for the responsible process
the question is asking "NOT".
It cannot show the timeline, it show the log one by one, but it can show all the process detail and the related information
i change my vote to C show a process timeline for the responsible process is NOT an option. what makes very picky question/answer is that there is an option: Show responsible Process Data ~ listed answer Show a process timeline for rhe responsible process ??? CrowdStrike documentation is really poor and these questions do not match up to the questions. i got the info from 201m detection triage
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
alanalanalan
6 months agokangaru
9 months, 2 weeks agosbag0024
9 months, 3 weeks agolightmagenta
11 months, 2 weeks agoChiquitabandita
11 months, 2 weeks agoChiquitabandita
11 months, 2 weeks ago