CCFR-201b
FREE EXAM DUMPS QUESTIONS & ANSWERS
CrowdStrike
CCFR-201b Exam
CrowdStrike Certified Falcon Responder
View CCFR-201b actual exam questions, answers and explanations for free.
Go To CCFR-201b Questions
All the information you need to pass CrowdStrike Certified Falcon Responder CCFR-201b exam and free practice exam verified by ExamDiscuss exam experts.
| Topic | Details |
|---|
| Topic 1 | - Detection Analysis: This domain covers analyzing and triaging detections in Falcon, including interpreting dashboards, endpoint detections, contextual data, process views, prevalence, IOCs, and implementing hash management actions like blocking, allowlisting, and exclusions.
|
| Topic 2 | - Event Search: This domain focuses on performing advanced event searches from detections, refining searches using event actions, and distinguishing between commonly used event types.
|
| Topic 3 | - Event Investigation: This domain covers analyzing Process and Host Timelines, pivoting to Process Timeline or Process Explorer, and analyzing process relationships using Full Detection Details.
|
| Topic 4 | - Search Tools: This domain covers utilizing User Search, IP Search, Hash Search, Host Search, and Bulk Domain Search to gather intelligence during investigations.
|
