OffSec Threat Hunter
OffSec Threat Hunter (OSTH, TH-200)
Endpoint EdrEnglish
Exam overviewPractice session
An EDR detects 'winword.exe' as the parent process of 'powershell.exe -nop -w hidden -enc <base64>'. What is the MOST appropriate hunt conclusion?
Loading your practice session…