Investigate is built with the Skills gap in mind; you do the threat hunting with No-Code KQL, while Harvey works in the background.
Investigate writes the KQL code for you so that you can focus on threat hunting. After all, that is the main reason for using automation.
Investigate is located in all areas where you do your threat hunting, incidents, devices, firewalls and Tickets.
The general rule is that if you are threat hunting in the SecQube portal, if you see orange text or numbers, click it, and Harvey will write the KQL to drill in.
Designed for skills gap and speed.
Powerful for the more experienced.
Investigate and Harvey are a powerful combination.
Investigate and Harvey will educate and support your engineers on the fly and continually.
Companies are stronger - increased skill levels of analysts means a stronger defense posture.
Investigate and Harvey do not share information outside of your company.
SecQube does not charge more for the use of Investigate or Harvey.
One of our goals is to enable every user to use Microsoft Sentinel with confidence.
You can easily create the time span of your search with the portal's time/date pickers.
SecQube Investigate empowers analysts with a swift and intuitive platform, enabling them to tackle complex threat hunting with confidence and ease.
.svg){kind=small}
.svg){kind=small}
.svg){kind=small}
