Which pre-defined reports offer information surrounding activities that typically indicate suspicious activity occurring on a system?

Hunt reports, specifically those generated by services like Falcon OverWatch (CrowdStrike's managed threat hunting team), are designed to provide information about suspicious activities. OverWatch proactively hunts for novel, sophisticated, or stealthy attacker tradecraft that may not trigger a standard, automated detection. These reports detail hands-on-keyboard activity and indicators of compromise that are highly indicative of a potential intrusion, fitting the question's description perfectly.

A. Scheduled searches are user-configured and not pre-defined reports provided by the platform to highlight suspicious activity found by CrowdStrike's experts.

C. Sensor reports typically provide administrative or operational data about the Falcon sensor itself (e.g., version, health status), not details about suspicious adversary activity.

D. While a timeline can be constructed during an investigation to view suspicious events, "Timeline reports" are not a specific category of pre-defined, proactive reports in the Falcon platform.

1. CrowdStrike, Inc. (n.d.). Falcon OverWatch: Elite Threat Hunting. CrowdStrike Official Product Documentation. The service description explicitly states that OverWatch hunters "detect suspicious activities" and provide "actionable alerts and reporting" on stealthy threats that evade standard security tools.