Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
You found a list of SHA256 hashes in an intelligence report and search for them using the Hash Execution Search. What can be determined from the results?
A.
Identifies a detailed list of all process executions for the specified hashes
B.
Identifies hosts that loaded or executed the specified hashes
C.
Identifies users associated with the specified hashes
D.
Identifies detections related to the specified hashes
Answer is A, the hash is refer to the process and it will usually use for IOC management for the process.
compare A and B, A is asking "process" and B us asking "hosts loaded it", but A is better answer because "process execution" is before "host" and one host can be load the same process more than once.
Answer is A, the hash is refer to the process and it will usually use for IOC management for the process.
compare A and B, A is asking "process" and B us asking "hosts loaded it", but A is better answer because "process execution" is before "host" and one host can be load the same process more than once.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Want to SAVE BIG on Certification Exam Prep?
3ffa7f1
3 weeks, 3 days agoalanalanalan
1 month, 2 weeks agoalanalanalan
1 month, 2 weeks agoDkdnfnfmdkdkd
4 months, 1 week agomlobo
4 months, 2 weeks agokangaru
4 months, 3 weeks agosbag0024
5 months, 1 week agoVasiOnCacao
6 months, 2 weeks agowildbandana
6 months, 3 weeks agolightmagenta
6 months, 4 weeks ago