AlienVault® USM Anywhere™

Investigations

Role Availability Read-Only Analyst Manager

Using AlienVault USM Anywhere, you can create investigations and organize the information from your environment. This feature enables you to manage and coordinate incident response activities. Use Investigations for linking alarms, events, notes, and other files to their responses, and you will have a complete view set of actions you have taken to address a particular threat.

This topic discusses these subtopics: