What do IOA exclusions help you achieve?

What do IOA exclusions help you achieve?
A . Reduce false positives based on Next-Gen Antivirus settings in the Prevention Policy
B . Reduce false positives of behavioral detections from IOA based detections only
C . Reduce false positives of behavioral detections from IOA based detections based on a file hash
D . Reduce false positives of behavioral detections from Custom IOA and OverWatch detections only

View Answer

Answer: B

Explanation:

According to the CrowdStrike Falcon® Data Replicator (FDR) Add-on for Splunk Guide, IOA exclusions allow you to exclude files or directories from being detected or blocked by CrowdStrike’s indicators of attack (IOAs), which are behavioral rules that identify malicious activities2. This can reduce false positives and improve performance2. IOA exclusions only apply to IOA based detections, not other types of detections such as machine learning, custom IOA, or OverWatch2.