elastic / elastic/roadmap

More Advanced Insights for Increased Correlations

Open
#207 0 comments 0 reactions 0 assignees View on GitHub
product-area:security
Dominant language
No language data
Stars
6
Forks
1
PR merge metrics
No merged PRs in 30d

Description

## More Advanced Insights for Increased Correlations

### Value proposition

To enhance the alert and attack investigation experience, we will evolve our capabilities to provide more advanced insights for correlating related information. This includes cross-referencing information such as related cases and alerts, as well as related attacks, entities, and chats. By correlating with other critical content, this expanded context will help users prioritize their investigations effectively.

### Expected outcome

As a user triaging and investigating suspicious activity, it is critical to understand related information. This can be related alerts, attacks, entities, or even previous investigations or chats. All of this information can help add context to the current investigation and potentially help prioritize the activity for response or further investigation.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.