Investigate Endpoints - Cortex XDR provides you with a wide range of options to investigate incidents on endpoints. - Administrator Guide - Cortex XDR - Cortex - Security Operations

Note

Endpoint investigation requires either a Cortex XDR Prevent or a Cortex XDR Pro per Endpoint license.