While in an Event Search, a responder clicks on an event action.

CrowdStrike CCFR-201b Question Answer

While in an Event Search, a responder clicks on an event action. What does the ' Show Child Processes ' event action do?

It displays a list of children in a new graphical tree.

It generates a new Event Search based on the specific Event Action and Parent PID.

It automatically terminates all children of that process on the endpoint.

It pivots to the Host Search for the machine where the process ran.

CCFR-201b PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"