4.1. Events

All events that have been stored in your Analysis Cockpit – regardless if they are assigned to a particular case or not – are displayed in the section Events. This section can be seen as your threat hunting pool. The section provides powerful filtering options. The Events Section is split into the different sources of your Events:

• THOR Events

• Aurora Events

Events Section

4.1.1. Matched Signatures

The Matched Signatures section shows all signatures that have been matched by the events in your Analysis Cockpit. The section provides swift identification of new issues.

Matched Signatures Section