Analyst Guidance

Analyst workflow guidance and quick links for investigations, testing, and reporting.

New close workflowAssignnment workflow FAQUnderstanding Vectra AI detectionsHoneypot MonitoringTriggering detections for testing purposesTCP reset does not stop modern attacksCDR (Detect) for AWS detection test guideRecall best practices guideInvestigate Quick Start Guide (prior to SQL search)Advanced search reference guide (QUX)Recall custom models - how to create detections (QUX)CrowdStrike EDR process correlationVectra self-detection eventsKey asset treatment (QUX)Exposure Findings - best practices guideAsset Inventory getting started (private preview)