All Standard features plus: Collect and analyze multiple hosts at the same time Collaborate and work on the same incident at the same time REST API to integrate with orchestration systems Related 3.10 adds Linux, Domain Controllers, and Fuzzy Malware Scanning for DFIR How To Investigate Endpoints with Cyber Triage and Windows Defender DFIR Next Steps: What to do after you find a suspicious Windows Network Logon Session Windows Scheduled Tasks for DFIR Investigations