The Incident Management Workflow
ContraForce centralizes your entire incident response lifecycle — from first alert to final classification — into a single workflow: Filter & prioritize → Assign → Investigate → Respond → Classify & closeCommand Dashboard
Your mission control — unified view of all incidents, Gamebook activity, and operational metrics.
Investigating Incidents
How to triage, assign, and investigate incidents step by step.
Workbench Overview
The investigation and response command center for individual incidents.
Entity Context Graph
Visualize relationships between affected users, devices, IPs, files, and URLs.
Classifying Incidents
Properly classify and close incidents with the right determination.
Entity Insights
Sign-in logs, device timelines, threat intelligence, and related incident correlation.