Get Cyber Triage
Cyber Triage is licensed by the number of investigators.
Standard
Feature Summary |
Standard Versions | Team Versions | ||
|---|---|---|---|---|
| Standard Pro | Standard Enterprise | Team | Team Enterprise | |
| Automated Ingest (only Enterprise has full capabilities) |
 |
|
|
|
| Guided Analysis |
|
|
|
|
| Collaborative investigations |
 |
|
|
|
| Publishing |
|
|
|
|
| Streaming ingest |
|
|
|
|
| Centralized processing |
|
|
|
|
| Import EDR telemetry |
|
|
|
|
| Publish IOCs |
|
|
|
|
| Incident-level access control |
|
|
|
|
| AI-integrated investigations (all versions until EOY) |
|
|
|
|
All versions come with Automated Ingest, Guided Analysis, and publishing.
Full Feature Breakdown
| Automated Ingest | Standard Pro | Standard Enterprise | Team | Team Enterprise |
|---|---|---|---|---|
| Collects volatile and file system data. |
|
|
|
|
| Agentless collection. |
|
|
|
|
| Collect to and from USB. |
|
|
|
|
| Collect over the network. |
|
|
|
|
| Collect to S3 bucket. |
|
|
|
|
| Imports disk images. |
|
|
|
|
| Imports KAPE output. |
|
|
|
|
| Imports logical files. |
|
|
|
|
| Imports memory images. |
|
|
|
|
| Queue up multiple file-based collections. |
|
|
|
|
| Queue up multiple network-based collections. |
|
|
|
|
| Streaming ingest for EDR deployments. |
|
|
|
|
| Triggers collection via SIEM or SOAR. |
|
|
|
|
| Import EDR telemetry. |
|
|
|
|