Triage results

Review Cortex XSIAM triage alerts, artifacts, and endpoint forensic timelines.

The Triage collection results page provides an overview of the different types of triage collections initiated on an endpoint.

The triage results page is divided into the following tabs:

• Alerts: Refer to Overview of the Issues page for descriptions of the fields.

• Artifacts: Display all of the artifact categories collected. Refer to Hunt results for more information on the artifacts.

• Host Timeline: Displays a list of normalized, per-host timelines that include multiple forensic artifacts in a single table.