3.5. Guided Analysis

Once data has been ingested and analysis has started, you can begin your review of the data.

• 3.5.1. Incident-level Examination
• 3.5.2. Host-level Examination
• 3.5.3. Search Past Investigations