See the fleet clearly
Start with platform-wide posture, current priorities, and the hosts that need attention first.
Start with platform-wide posture, current priorities, and the hosts that need attention first.
Open a host to inspect context, recent behavior, exposure, patch state, and operational history.
Move from a suspicious event into related traffic, processes, services, or detections without losing context.
Contain, patch, investigate further, or adjust posture from the same operating surface.