CCFR-201b Exam Dumps - CrowdStrike CCFR Questions and Answers

Managing user profiles and registry hives during login.

Launching and managing the lifecycle of system services.

Monitoring network traffic for potential data exfiltration.

Providing a graphical interface for the Windows Task Manager.

It provides best practices for different cybersecurity domains, such as Identify and Access Management

It provides a step-by-step cyber incident response strategy

It provides the phases of an adversary ' s lifecycle, the platforms they are known to attack, and the specific methods they use

It is a system that attributes an attack techniques to a specific threat actor

It can search for both files and registry keys simultaneously.

It identifies the geographical location of the file ' s creator.

The ' Hash Written History ' section is only available for SHA256 hashes.

It is primarily used to isolate a host from the network.

Technique

Tactic

Objective

Indicator

Process Timeline

Host Timeline

User Timeline

Network Timeline

It allows for the automated decryption of files affected by ransomware.

It provides a standardized view of the attack lifecycle to help understand adversary behavior.

It enables the sensor to block kernel-level drivers from unknown publishers.

It provides a real-time count of the total number of files on the endpoint.

Create a Custom IOC with an action of allow for the hash

Create a Machine Learning Exclusion with an action of allow for the hash

Create a Custom IOA with an action of allow for the hash

Create an IOA Exclusion with an action of allow for the hash

Activity

Investigate

Configuration

Dashboards

Execution is prevented on all hosts by default

Execution is prevented on selected host groups

Execution is prevented and detection alerts are suppressed

The hash is submitted for approval to be blocked from execution once confirmed by Falcon specialists

Event Search

Executive Summary dashboard

Host Search

Installation Tokens