CrowdStrike Certified Falcon Hunter

You've experienced a ransomware infection that has spread throughout the enterprise. What is the first step you would take to determine the source of infection?

Which statement will filter for all events that correspond to a new scheduled task registered by the user "Doris"?

You identify an instance of a user in your environment utilizing a Cloudflared tunnel daemon, resulting in unusual command line activity. What steps would you t...

You have an Advanced Event Search query created to identify suspicious PowerShell usage and want to display the results in a dashboard. How can this query be di...

You are a penetration tester working to assess your client's response capabilities to active threats. You harvest a handful of employee emails from a public sou...