Skip to content

InvestigateIncidents

ConnectingAwaiting observations.—

Workspace
Investigate
Incidents

▶One-way boundary not verified.

Incident queue

Related detections grouped by shared entity, told in the order they were observed, corroborated and explained.

Connecting

Stored incidents: —
Correlated alerts: —
Threat classes spanned: —

Loading incident queue

No incident selectedOpen an incident to read how its alerts were observed, corroborated and grouped into one explanation.