A responder is looking at event telemetry and sees an event named ' ProcessRollup2 '...

CrowdStrike CCFR-201b Question Answer

A responder is looking at event telemetry and sees an event named ' ProcessRollup2 ' . Which sentence best describes what this event type represents?

An existing process was terminated by the user.

A new process was created and started on the endpoint.

A process successfully established a network connection.

A process modified a sensitive registry key.

CCFR-201b PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"