SentinelOne THP
SentinelOne Threat Hunting Professional (THP S1-301)
Hunting QueriesEnglish
Exam overviewPractice session
A threat hunter writes the following Deep Visibility PowerQuery: `| from process | where SrcProcName = 'powershell.exe' AND NetworkUrl != null | group by NetworkUrl`. What is the PRIMARY analytical goal of this query?
Loading your practice session…