CrowdStrike Certified Falcon Hunter

You need to search for all IP v4 connections made by any powershell.exe processes. What CQL query will help you find these processes?

Which query below can be utilized to filter for users with greater than 25 total logons?

You get a detection for a malicious PowerShell script with the process flow below. Unknown Process => chrome.exe => wscript.exe => powershell.exe Which...

You receive an alert for the following process tree: Outlook.exe -> iexplore.exe -> Winword.exe -> cmd.exe -> PowerShell.exe What has occurred accor...

You've been tasked with writing a query that would rename the RemoteAddressIP4 field to SourceIP. What would be the correct syntax using the rename() function?