3.5. Assisted ExaminationΒΆ Once data has been ingested and analysis has started, you can begin your review of the data. 3.5.1. Incident-level Examination 3.5.2. Host-level Examination 3.5.3. Search Past Investigations