Sounds like A to me:
Falcon allows you to upload hashes from your own black or white lists. To enabled this navigate to the Configuration App, Prevention hashes window, and click on “Upload Hashes” in the upper right-hand corner. Note that you can also automate the task of importing hashes with the CrowdStrike Falcon® API.
@plantvast - I think you might be wrong because you cannot block IPs and domains, only hashes in the IOC + as written in the policy section "Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
You can actually add hashes, domains and IP addresses on IOC management. Navigate to the page in Falcon and attempt to a new indicator and the options will appear.
you are right and wrong my friend, adding IPs and domains in the IOC is indeed possible, but not with "block" action on them - only "detect" or "no action".
from the "Custom Blocking" policy section - "Block processes matching hashes that you add to IOC Management with the action set to "Block" or "Block, hide detection".
Custom blocking in prevention policies referes to hashes, ips, and domains added to IOC Management.
upvoted 1 times
...
This section is not available anymore. Please use the main Exam Page.CCFA Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
diegofretesc
7 months agoManuneethi
9 months, 3 weeks agosbag0024
10 months, 4 weeks agoMSKid
11 months, 1 week agoFerbOP
1 year ago3xploit
1 year, 1 month agoim2ca
1 year, 1 month agotestmailuc
1 year, 2 months agoJek88
1 year, 2 months agotestmailuc
1 year, 2 months agokgbac
1 year, 2 months agotestmailuc
1 year, 2 months agoShuliAbba
1 year, 3 months agoplantvast
1 year, 3 months agoShuliAbba
1 year, 3 months agoShuliAbba
1 year, 3 months agoplantvast
1 year, 3 months ago