Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Free Preparation Discussions
MENU
CrowdStrike Exam CCFH-202 Topic 6 Question 3 Discussion
Actual exam question for
CrowdStrike's
CCFH-202 exam
Question #: 3
Topic #: 6
[All CCFH-202 Questions]
Topic #: 6
What Investigate tool would you use to allow an analyst to view all events for a specific host?
Suggested Answer:
C
The Host Timeline is the Investigate tool that you would use to allow an analyst to view all events for a specific host. The Host Timeline shows a graphical representation of all events that occurred on a host within a specified time range. It allows an analyst to zoom in and out, filter by event type or name, and drill down into event details. The Bulk Timeline, the Host Search, and the Process Timeline are not Investigate tools that you would use to view all events for a specific host.
Currently there are no comments in this discussion, be the first to comment!