Crowdstrike RTR commands anyone got something worthwhile!

I’ll go first since you have give to get I assume.

Cmd - “eventlist” pick your favorite
Example: eventlog export Security c:\security_eventlog

Creates CSV file of security win events in C drive to search for window event IDs 4660 deleted files.

Not great but I’m just learning

Does anyone have good RTR one liners or commands to find a downloaded files from internet?

crowdstrike csv cybersecurity drive event eventlog events export file files good great ids search security window