Where is it used?
Demisto can launch a Cyber Triage investigation. Orchestration solutions allow companies to have a faster and more efficient response because common steps are automated and do not require human intervention.
Why is it useful?
Allows you to more quickly start an endpoint investigation and make the best use of incident responder’s time because the data will be ready for review when they are assigned to the alert.Visit site