Windows telemetry
Collect selected Windows event logs to build a picture of endpoint activity.

Endpoint visibility and focused investigations. Steel Raven brings device activity, security events and findings into one clear workspace.
Open staging console ↗Collect selected Windows event logs to build a picture of endpoint activity.
Explore normalized events and review heuristic findings alongside the devices that generated them.
Read device, event and incident records through an authenticated workspace.
The autonomous cyber defence vision is under development. The current release provides read-only visibility and demonstration findings. It does not prevent attacks or perform automated response actions. Console access is limited to authorized operators.