Investigation & Forensics
Case Management
Cases with attack story, timeline and network graph.
Available as a standalone module · Add to my package8Open cases
1,284Entities linked
23Techniques mapped
- Attack story and attack treeActive
- Timeline, Sankey and network graphsActive
- Cross-case correlationActive
- Report generationActive
What it does
Open a case, attach logs and incidents, and let Awiron rebuild the attack story with entities, correlations, a MITRE matrix and cross-case links.
Attack story and attack tree
Timeline, Sankey and network graphs
Cross-case correlation
Report generation
How it worksin three steps.
Gather evidence
Pull logs, incidents and uploaded files into a single case.
Reconstruct
Entities, correlations and a timeline rebuild the attack step by step.
Report
Share findings with the team or export an executive PDF.
Works best withthese modules.
See all 30 modules
Detection & Response
Incident Management
Correlated incidents with severity, assets and timeline.
Learn more Threat IntelligenceMITRE ATT&CK Coverage
See which techniques you can detect, with evidence.
Learn more Reporting & GovernanceReports
Template library, builder and scheduled delivery.
Learn moreAlso in Investigation & Forensics
Ready to see it on your own data?
A 30-minute walkthrough with an engineer, tailored to your environment.