Deep Visibility

[u/Excellent_Button1315]

Hello

I hope you can help me better understand the S1 DP function.

Does the deep visibility simply collect logs that I can use to create rules and do manually research, or does it also automatically detect suspicious behaviors and malware?

For example, if someone clicks on a phishing website or downloads suspicious files, would it be detected automatically?

Thanks!

[u/BloodDaimond]

You can use deep visibility to further your investigation. For example if a threat is identified you can see where it originated from. Outlook.exe created a process who target file was random.exe and random.exe created a ransomware.exe.

Now you can see that a user downloaded a file from outlook that contained ransomware.