Valid XDR-Engineer Dumps shared by ExamDiscuss.com for Helping Passing XDR-Engineer Exam! ExamDiscuss.com now offer the newest XDR-Engineer exam dumps, the ExamDiscuss.com XDR-Engineer exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com XDR-Engineer dumps with Test Engine here:
An attacker attempts to dump credentials by accessing LSASS memory on a Windows endpoint. Which Cortex XDR detection capability is most likely involved?
Correct Answer: A
Credential dumping techniques often involve abnormal access to sensitive processes such as LSASS. Behavioral monitoring detects suspicious process interactions, privilege escalation attempts, and memory access patterns commonly associated with credential theft.