Aside from a Process Timeline or Event Search, how do you export process event data from a detection in .CSV format?
The Falcon platform will show a maximum of how many detections per day for a single Agent Identifier (AID)?
When looking at the details of a detection, there are two fields called Global Prevalence and Local Prevalence. Which answer best defines Local Prevalence?
When analyzing an executable with a global prevalence of common; but you do not know what the executable is, what is the best course of action?
Which of the following is an example of a MITRE ATT&CK tactic?
What happens when a hash is set to Always Block through IOC Management?
