CrowdStrike Certified Falcon Hunter (CCFH) — Question 83

In the Powershell Hunt report, what does the “score” signify?

Answer options

• A. Number of hosts that ran the PowerShell script
• B. How recently the PowerShell script executed
• C. Maliciousness score determined by NGAV
• D. A cumulative score of the various potential command line switches

Correct answer: D

Explanation

The correct answer is D, as the score in the Powershell Hunt report reflects a cumulative evaluation of various command line switches that may have been used. Options A and B are incorrect because they refer to specific actions related to the script's execution rather than the overall scoring system. Option C, while it discusses a score, inaccurately implies that it relates to the maliciousness assessed by NGAV rather than command line switches.