Incident response generates multiple questions throughout the investigation process. Who was involved? What accounts were used? What assets were involved? What happened before, during, and after the event? Has it happened before? What is normal and what is abnormal? How long does it take to answer those questions? How long does it take to create an incident timeline? The incident investigation process is the most time-consuming and tedious aspect of the incident response process. See how Exabeam’s Advanced Analytics automates incident triage and investigations.
