What types of events are returned by a Process Timeline?

By default, when a file is quarantined by the Falcon sensor to prevent execution, how many days does that file remain on the host's local disk?

A responder releases a file from quarantine on a specific workstation. What is the default scope of the allowlist that is created during this process?

When examining raw event data, what is the purpose of the field called ParentProcessld_decimal?

To understand how a threat moved on a system, a responder must know the role of common processes. Which of the following statements best describes the standard functionality of explorer.exe?