You need details about key data fields and sensor events which you may expect to find from Hosts running the Falcon sensor. Which documentation should you access?
A. Events Data Dictionary
Document : Falcon Documentation > Event Investigation > Events > Events Full Reference (Events Data Dictionary)
This reference contains all sensor and non-sensor events and their available documentation in one location.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
alanalanalan
4 months, 1 week ago