Investigation and response

Investigate threats and respond using cases, automation, and endpoint actions.

Investigate issues, findings, assets, and endpoints to understand threats and take action. Use automation, response actions, forensics, and XQL queries to contain risks and accelerate remediation.