Review the evidence and analysis used to reach the investigation result.
Review Summary and Analysis to understand the Investigation Agent's assessment of the alert. Keywords such as malicious or suspicious are highlighted.
Review Evidence to examine the technical, behavioral, and impact data points gathered by the Investigation Agent.
Review MITRE ATT&CK to see the adversary tactics and techniques mapped to the observed behavior.
Review Confidence to understand the reasoning behind the assigned Wise confidence score. Each finding has a severity chip.
Review Thought Process to see the queued inputs, tool calls, and time taken at each reasoning stage.
Review Notes to see observations added by analysts. Notes are shared with other analysts working on the investigation. You can add formatting, highlight text, and edit or delete your own notes.