Investigation
Investigation tab displays a list of all your end-users, alerts or devices allowing you to view and filter related activities to drill down for further information.
The Investigation dashboard has tabs: Users, Alerts and Devices. The Users tab allows to view details about the end-users in your organization, and activity information. The Alerts tab lists the alerts reported due to security incidents happening at the endpoint. The Devices tab, shows the log of USB removable media devices used on the endpoint.