HTB CDSA
HTB Certified Defensive Security Analyst (CDSA)
Siem OperationsEnglish
Exam overviewPractice session
In Elastic/KQL, which query correctly searches for all Windows Security events with Event ID 4688 (process creation)?
Loading your practice session…