Before learning how to work with the Hunters XDR platform, it is advised to get yourself acquainted with the Hunters XDR terminology as well as the different parts that make up the Hunters XDR pipeline.

Ingestion

The Hunters XDR flexible ingestion engine, allows for ingestion of multiple data sources of high volume in real time. Click here to learn more about the Hunters XDR ingestion engine and its components.

Detection

The Hunters XDR advanced real time stream processing engine, allows for the creation of complex threat use-cases and detections. Click https://hunters-kb.atlassian.net/wiki/spaces/HD/pages/1540379 to learn more the Hunters XDR detection engine and its components.

Investigation

The Hunters XDR automatic investigation engine, allows for the automation of expertise-driven queries to facilitate effective prioritization of alerts. Click https://hunters-kb.atlassian.net/wiki/spaces/HD/pages/1540386 to learn more about the Hunters XDR automatic investigation engine.

Correlation

The Hunters XDR correlation engine, allows for advanced correlation across the entire security stack through the use of entity extraction and plotting on a graph database. Click https://hunters-kb.atlassian.net/wiki/spaces/HD/pages/1704168 to learn more about the Hunters XDR Correlation engine.