Which of the following Event Search queries would only find the DNS lookups to the domain: www randomdomain com?

Which of the following Event Search queries would only find the DNS lookups to the domain: www randomdomain com?
A . event_simpleName=DnsRequest DomainName=www randomdomain com
B. event_simpleName=DnsRequest DomainName=randomdomain com ComputerName=localhost
C. Dns=randomdomain com
D. ComputerName=localhost DnsRequest "randomdomain com"

View Answer

Answer: A

Explanation:

This Event Search query would only find the DNS lookups to the domain www randomdomain com, as it specifies the exact event type and domain name to match. The other queries would either find other events or domains that are not relevant to the question.

Reference: https://www.crowdstrike.com/blog/tech-center/event-search-in-crowdstrike-falcon/