What it covers
Review correlated alerts, assignment and immutable investigation history, then create a governed service incident.
Intelligence and security
NovaSIEM public beta
Triage supported endpoint protection signals against customer and service context.
How it works
Triage supported endpoint signals in service context
Review correlated endpoint protection alerts alongside customer and service information. Assign an investigation, preserve its history and create a governed service incident when appropriate.
In practice
Public beta scope is defined; broad log collection and automated containment are not included.
When to use it
Useful situations
- Review supported endpoint protection signals in customer context.
- Assign a human investigation for a correlated alert.
- Create a governed service incident after triage.
A working path
How the work moves
Receive
Review the normalized detection available to the enabled beta workspace.
Investigate
Assign the alert and preserve the investigation history.
Escalate
Create a service incident when the reviewer decides follow-up is warranted.
Illustrative scenario
endpoint alert
A security reviewer checks a correlated endpoint signal, connects it to the affected customer and creates a service incident for the assigned team. The investigation history captures who reviewed the alert and what they decided, while the resulting service incident gives the responsible team a normal accountable follow-up path.
Before you start
What to check
- NovaSIEM is a bounded public beta with workspace enablement.
- Broad log collection and automated containment are not included.
Does NovaSIEM ingest every log source?
No. The beta covers a defined set of endpoint posture and normalized detections.
Does it contain threats automatically?
No. Investigation and escalation remain human-governed.
Get started
See your customer work in one place.
Start with the core CRM for free, then add the tools your team needs.