Our central correlation engine uses machine learning algorithms to find relationships among impacted systems, objects, and events collected from our sensors across endpoint, cloud, identity, and productivity application sources. This information is then used to generate an interactive, graphical representation of the incident and recommend response actions to remediate and contain threats.