From the Detections page, how can you view ‘in-progress’ detections assigned to Falcon Analyst Alex?

From the Detections page, how can you view ‘in-progress’ detections assigned to Falcon Analyst Alex?
A . Filter on’Analyst: Alex’
B . Alex does not have the correct role permissions as a Falcon Analyst to be assigned detections
C . Filter on ‘Hostname: Alex’ and ‘Status: In-Progress’
D . Filter on ‘Status: In-Progress’ and ‘Assigned-to: Alex*

View Answer

Answer: D

Explanation:

According to the CrowdStrike Falcon® Data Replicator (FDR) Add-on for Splunk Guide, the Detections page allows you to view and manage detections generated by the CrowdStrike Falcon platform2. You can use various filters to narrow down the detections based on criteria such as status, severity, tactic, technique, etc2. To view ‘in-progress’ detections assigned to Falcon Analyst Alex, you can filter on ‘Status: In-Progress’ and ‘Assigned-to: Alex*’2. The asterisk (*) is a wildcard that matches any characters after Alex2.