Triage and Investigate

After data is collected in your data lake, Hunters can run detectors on it to find suspicious behaviors, create leads, alerts and stories, and enrich them with extra information from your organization's environment.

Then, you can start the process of triaging and investigating each leads, alert or story to determine its validity and threat. You can also research further and query your raw data to find the answers you need.


📘In this section