Learn
Training Center
Nineteen short lessons that take you from a cold start to running a multi-event security operation. Read end-to-end or jump to what you're stuck on. Screenshot-heavy, assumes nothing.
- Run your first scan · ~7 min
- Read a brief — severity & signals · ~8 min
- Activate the Live Monitor · ~7 min
- Set up alerts & notifications · ~6 min
- …and 15 more
Open Training Center
Reference
Docs
Every signal in the 70+-signal scan documented — what it measures, how it scores, when it fires, and where the data comes from. The look-up surface for ops teams and the integration reference for developers.
- 70+ signal docs (chatter, environment, movement, context)
- Severity scoring rubric
- Brief format reference
- Developer API reference
Open Docs