The IR Toolkit in action

Incident Response Console. Single command hub for any ongoing incident: endpoint state, process tree, network context, user context, file changes, alerts from both engines, all in one view.