This response and threat hunting pack provides you with endpoint data enabling you to investigate and analyze potential threats in real time.
What does this pack do?
- Hunts for malicious indicators.
- Investigates and analyzes potential malware and threats.
- Remediates/removes unauthorized, malicious, or unwanted processes.
- Gets alerts about suspected processes running on an endpoint.
- Investigates processes and related files with potential malware or threats.
This pack includes several automations and playbooks to help with the malware investigations.
