Synthèse
Use the classifications and fields written by alert analysis to focus Attack Discovery on alerts that deserve deeper investigation. Add the Attack Discovery step to an existing enrichment or escalation playbook, while leaving cases, paging, and response processes where they already work.
Use the classifications and fields written by alert analysis to focus Attack Discovery on alerts that deserve deeper investigation. Add the Attack Discovery step to an existing enrichment or escalation playbook, while leaving cases, paging, and response processes where they already work.