Investigation and response

Investigate issues, findings, and assets, then automate response actions.

Investigate issues, findings, artifacts, and assets to understand security risks. Review evidence, establish context, and prioritize remediation.

Use automation, Cortex Assistant, and XQL to analyze and respond efficiently. Manage playbooks, scripts, integrations, and investigation data from one workflow.