Multiple ChoiceSecurity Operations
Question 5. A security team suspects attackers are using PowerShell in unusual ways, but no existing detection rule has generated an alert. Which activity would best help analysts proactively search for this behavior?
Explanation is locked. Start the demo or unlock full access to review explanations inside the protected test engine.