CCDL2
CyberDefenders Certified CyberDefender Level 2 (CCDL2)
Threat HuntingEnglish
Exam overviewPractice session
A threat hunter analyzing Elastic SIEM logs wants to identify processes that spawned cmd.exe from a browser process (e.g., chrome.exe). Which KQL query pattern correctly targets this parent-child relationship?
Loading your practice session…