Which term will accomplish this search?

An administrator wants to find instances where the binary Is unsigned.

Which term will accomplish this search?
A . NOT process_publisher:FILE_SIGNATURE_STATE_SIGNED
B . NOT process_publisher_state:FILE_SIGNATURE_STATE_SIGNED
C . process_publisher_state:FILE_SIGNATURE_STATE_NOT_SIGNED
D . process_publisher:FILE_SIGNATURE_STATE_NOT_SIGNED

View Answer

Answer: B