Hunting

Use Cortex XSIAM hunt collections to search for targeted activity across many endpoints.

Hunting enables investigators to search for specific data across a large number of hosts in Cortex XSIAM. Hunt collections provide more details about where something occurred. Hunting examples include finding which endpoints executed a piece of malware, which users accessed a particular file, or which endpoints were accessed by a specific user.