Investigated Insight (SOC Analyst Agent)
Catalog row in Vendor License Metrics · Cited
- Unit
- Completed investigation of a SIEM-triggered Insight
- Definition
- Flex Pricing Supplemental s.4g: an "Investigated Insight" is a completed investigation of a SIEM-triggered Insight that produces a verdict (Benign, Suspicious, Malicious) on a daily basis per OrgID; example burn rate 100 Credits per Investigated Insight.
- Counting rules
- The daily allocation is consumed per day; any overage adds credits per Investigated Insight above the baseline on that day. Requires an active CSE GB Ingest (SIEM) licence.
- Applies to products
- SOC Analyst Agent
- Related metrics
- Product category