What is the difference between a Host Search and a Host Timeline?
This is the difference between a Host Search and a Host Timeline. A Host Search is an Investigate tool that allows you to view events by category, such as process executions, network connections, file writes, etc. A Host Timeline is an Investigate tool that allows you to view all events in chronological order, without any categorization. Both tools can be used for detection investigation and proactive hunting, depending on the use case and preference. You can access a Host Search from a detection or manually enter the host details. You can also populate the Host Timeline fields manually or from other pages in Falcon.
Leonora
10 months agoLeanna
10 months agoCyndy
9 months agoLeeann
10 months agoCristina
11 months agoGlenn
11 months agoEveline
9 months agoFlorinda
10 months agoClemencia
10 months agoTayna
10 months agoKris
10 months agoLouvenia
10 months agoChantay
11 months agoDona
11 months agoCarma
11 months agoFreeman
11 months agoDona
12 months ago