Technical Tip: How is FortiInsight used for threat hunting?
Description
This article describes how is FortiInsight used for threat hunting.
Solution
FortiInsight records a forensic timeline of all endpoint submitted events and provides an extensive search capabilities across this event recording in order to carry out threat hunting.
By capturing vast amounts of data, it is possible to build up a detailed picture of the user behavior and investigate activities which either do not comply with policies, are anomalous or are both anomalous and non-compliant.
This article describes how is FortiInsight used for threat hunting.
Solution
FortiInsight records a forensic timeline of all endpoint submitted events and provides an extensive search capabilities across this event recording in order to carry out threat hunting.
By capturing vast amounts of data, it is possible to build up a detailed picture of the user behavior and investigate activities which either do not comply with policies, are anomalous or are both anomalous and non-compliant.
