Skip to main content
Tier4 automatically extracts relevant indicators from alerts including IP addresses, file hashes, and more. These indicators are used to aggregate behavior across hosts and users and are automatically enriched with third-party threat intelligence. The intel page provides an overview of associated cases containing the relevant indicator.