What does pivoting to an Event Search from a detection do?
It gives you the ability to search for similar events on other endpoints quickly
It takes you to the raw Insight event data and provides you with a number of Event Actions
It takes you to a Process Timeline for that detection so you can see all related events
It allows you to input an event type, such as DNS Request or ASEP write, and search for those events within the detection
Submit