What are Event Actions?
What are Event Actions?
Event Actions are automated searches that can be used to pivot between related events and searches. This allows users to easily navigate from one piece of event data to another related piece, aiding in the investigation and analysis of security events.
Appears to be A as Event actions aren't necessarily only available in host search
the other sources also say B but the CrowdStrike pdfs list event actions as pivot from an Event Search so this goes more with A. they are hyperlinks to automated searches so not sure but i am choosing A until otherwise i get new info
It's A
This is A
Event workflows are automated searches that can be used to pivot between related events and searches. To use a workflow, click the Event Actions button at the bottom of the JSON for any raw event