Using USM Anywhere, you can create investigations and organize the information from your environment. This feature enables you to manage and coordinate incident response activities. Use Investigations for linking alarms Alarms provide notification of an event or sequence of events that require attention or investigation., events Any traffic or data exchange detected by LevelBlue products through a sensor or external devices such as a firewall., notes, and other files to their responses, and you will have a complete view of actions you have taken to address a particular threat.

This topic discusses these subtopics: