DFIR: From alert to root cause using Osquery without leaving Elastic Security

Learn how to perform distributed, real-time Digital Forensics and Incident Response (DFIR) using Osquery and Elastic to investigate threats at scale without relying on disk imaging.