BLUE TEAM OS

Center · Control plane

Command

Security Command Center Live Alerts

Detect

Detection Engineering ATT&CK Coverage Identity Defence Network Investigation Endpoint Investigation Connectors Vulnerabilities Telemetry Health

Investigate

Incidents Entity Graph Threat Hunt Threat Intel DFIR Workbench Architecture Audit

Engineering

Blue Range Self-Improvement Playbooks Quality Index Readiness Gate Language Layer

Identity Investigation

Identity findings produced by deterministic rules. Each finding cites evidence IDs from primary telemetry.

Loading identity findings…