Correlation is the process of linking security events from various sources—such as endpoints, networks, and cloud services—to build a complete picture of an attack. Automated analysis powered by machine learning and behavioral analytics connects isolated alerts into a single incident, enabling faster detection, more accurate investigation, and quicker response compared to using siloed tools.
Based on the correlation rule, the alerts will be grouped in a single incident.