Which capability does Cortex XDR provide for data visualization during investigations?

Cortex XDR enhances data visualization during investigations by focusing on identifying user behavioral patterns. This capability allows security teams to observe and analyze how users typically interact with their systems and data. By establishing a baseline of normal behavior, any deviations from this norm can be quickly detected and investigated further as potential security threats.

Understanding user behavior is essential in identifying suspicious activities or potential insider threats, which might not be apparent through traditional monitoring methods. The ability to visualize these patterns aids in making informed decisions during security operations and enhances the overall responsiveness to evolving threats.