Track system activity in real time: view the number of threats detected, investigations created, and hosts activated. Users can create custom logic maps of critical infrastructure, important areas of their network, or specific hosts.

• of Offline/Online Hosts
• of Investigations Involved
• of PUPs
• of Malware Involved

Navigate to a specific cluster to view details of an investigation with threat information or view more detailed information on an infected host. Categorize open investigations to:

• Working Set ( automatically generated new investigations)
• Recently Dead ( closed investigations)
• Active ( Open Investigations)

Access detailed information on a list of hosts in order to develop an enhanced understanding before conducting hunting operations

• Host Info
• Statistics
• Events
• View Stream
• Host Objects
• Host Investigations

Global view reports

• Enrolled Snow sensors
• Ongoing investigations
• Last PUP
• Affected PUP
• OS user statistics

TAILORED WEEKLY REPORTING

• Interface to search all/any objects in a database.
• View object relationships such as parentchild relationship
• Quickly identify outliers.

Over 20 Remote Commands

• GET PROCESS MEMORY MAP
• READ PROCESS MEMORY
• FIND MEMORY STRINGS
• SUSPEND THREAD
• TERMINATE THREAD and so on.

• License keys
• Available Install