Which process would show in the query results?

Review this EDR query:

childproc_name:whoami.exe AND childproc_name:hostname.exe AND childproc_name:tasklist.exe AND childproc_name:ipconfig.exe

Which process would show in the query results?
A . Any process invoked by whoami.exe, hostname.exe, tasklist.exe, and ipconfig.exe
B . Any process invoked by whoami.exe, hostname.exe, tasklist.exe, or ipconfig.exe
C . Any process invoking whoami.exe, hostname.exe, tasklist.exe, or ipconfig.exe
D . Any process invoking whoami.exe, hostname.exe, tasklist.exe, and ipconfig.exe

Answer: D

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments