Findings & events

An event records an observed change; a finding records an evaluated condition that needs review. Use events for chronology and findings for evidence, assessment, and remediation follow-up.

Guides

• Triage findings

• Investigate events

• Finding and event rules reference

Finding rules

Browse the finding rules reference for the conditions highlighted by each finding type.

Snapshot event rules

Browse the event rules reference for the observed changes recorded in the timeline.