DescriptionThis article describes how is FortiInsight used for threat hunting.SolutionFortiInsight records a forensic timeline of all endpoint submitted events and provides an extensive search capabilities across this event recording in order to carry out threat hunting.
By capturing vast amounts of data, it is possible to build up a detailed picture of the user behavior and investigate activities which either do not comply with policies, are anomalous or are both anomalous and non-compliant.
