HTB CDSA Practice Questions - HTB Certified Defensive Security Analyst Exam

Which Sysmon Event ID records the creation of a new process and is most useful for detecting execution of malicious binaries?

Sysmon Event ID 1 Sysmon Event ID 3 Sysmon Event ID 8 Sysmon Event ID 11

Sysmon Event ID 1

Access more questions from this quiz

Continue to HTB CDSA Practice Questions - HTB Certified Defensive Security Analyst Exam for more practice questions and the full quiz experience.