Response and Elevated Operations
These pages act on an incident or a legitimate access need: contain a host, block a domain fleet-wide, grant time-bounded elevation, ask an endpoint a question, or run a vetted live command.
These pages act on an incident or a legitimate access need: contain a host, block a domain fleet-wide, grant time-bounded elevation, ask an endpoint a question, or run a vetted live command.
| Page | Guide |
|---|---|
| Response Actions | Active response |
| Domain Blocklist | Global domain blocklist |
| Just-in-Time Access | Just-in-Time access |
| Forensic Queries | Forensic queries |
| Live Response | Live response |
