The SIEM app is now a part of the Elastic Security solution. Click here to view SIEM documentation for previous releases.
« Windows Script Executing PowerShell Investigating events in Timeline »
Elastic Docs ›Elastic Security Solution [7.9]

Investigate events

edit

Investigate events

edit
This sections describes how to use timelines and the timeline graphical interface to investigate events.
« Windows Script Executing PowerShell Investigating events in Timeline »