Features of Sophos XDR for threat investigation include:

• Unified data lake: Aggregates data from endpoints, servers, firewalls, and other sources for comprehensive analysis.
• Cross-product correlation: Links related security events across different products to identify sophisticated attacks.
• Automated threat hunting: Uses AI and machine learning to proactively search for threats.
• Detailed forensics: Provides in-depth analysis of security incidents, including root cause analysis and impact assessment.
• Custom queries: Allows security teams to create custom queries to investigate specific threats or anomalies.