CrowdStrike Certified Falcon Hunter

A compromised host shows evidence that the net user hacker password123 /add /domain command was executed. Which MITRE ATT&CK technique does this align with?

You have an Advanced Event Search query created to identify suspicious PowerShell usage and want to display the results in a dashboard. How can this query be di...

During an investigation, you see that the adversary is trying to Gain Access by Credential Access via OS Credential Dumping. According to the MITRE ATT&CK F...

Which function would you add to a groupBy() to show all the associated domain names that an executable communicated to in a single record?

Where can you find details about key data fields to use in an advanced search query?