NSE5_EDR-5.0 Exam Dumps : Fortinet NSE 5 - FortiEDR 5.0 Exam

Playbooks

Security Policies

Forensic

Communication Control

RDP connections will be blocked and classified as suspicious

A security event will be triggered when the device attempts a RDP connection

This query is included in other organizations

The query will only check for network category

It helps to make sure the hash is really a malware

It helps to check the malware even if the malware variant uses a different file name

It helps to find if some instances of the hash are actually associated with a different file

It helps locate a file as threat hunting only allows hash search