脅威ハンターは、組織の環境にインストールされている新しい永続化メカニズムを特定しようとします。すべてのエンタープライズ ワークステーションからスケジュールされたタスクを収集すると、次のホストの詳細が集約されます。

上記の詳細に基づいて、ハンターが最初に実行する必要があるアクションは次のうちどれですか?
正解:C
The first step should be to perform a public search for malware reports on taskhw.exe, as this file is suspicious for several reasons: it is located in a non-standard path, it has a high CPU usage, it is signed by an unknown entity, and it is only present on one host. A public search can help to determine if this file is a known malware or a legitimate program. If it is malware, the hunter can then take appropriate actions to remove it and prevent further damage. The other options are either premature or ineffective, as they do not provide enough information to assess the threat level of taskhw.exe. Reference: Cybersecurity Analyst+ - CompTIA, taskhw.exe Windows process - What is it? - file.net, Taskhostw.exe - What Is Taskhostw.exe & Is It Malware? - MalwareTips Forums