CrowdStrike Falcon · Techclick Simulator

CrowdStrike Falcon Falcon · EDR

Host: falcon-tc · Mode: exec Hub

About this lab

Endpoint detection practice: host search, detections, IOCs, RTR-style commands, and containment with realistic dummy detections.

Student guide (click to run)

Quick commands

show detectionsOpen detections
show hostsManaged endpoints
show host win-hr-12Host detail
show iocsCustom IOCs
show incidentsIncidents
contain host win-hr-12Network contain
lift-containment win-hr-12Release host
search process=powershell.exeHunt query
helpCommand list