CrowdStrike Certified Falcon Hunter

The CCFH certification confirms our MPGSOC analysts are able to investigative deeper detection analysis and response as well as machine timelining and event-related search queries, insider-threat-related investigations, and proactive investigations (threat hunting).

A successful CrowdStrike Certified Falcon Hunter is capable of the following:

• Understand all aspects of detection investigation
• Navigate among and use multiple views in the Falcon console to perform automated queries such as IP and Domain searches and time-lining using Splunk event searching
• Understand event data structure and relationships
• Conduct simple and intermediate search queries using Splunk
• Search Processing Language (SPL)