An administrator wants to find instances where the binary Is unsigned.
Which term will accomplish this search?

An administrator is concerned that someone may be using unauthorized commands from cmd.exe. These commands are not considered suspicious or malicious, and there is no policy based around them.
Which page should the administrator use to find these commands?

An analyst is investigating an alert within Enterprise EDR on the process analysis page. The process tree can be seen below:

Which statement accurately characterizes this situation?

Which statement is true about Carbon Black Live Response (CBLR)?

How often do watchlists run?