In reply to Christian Amador.

Thank you, Christian. Which other solutions present the most interest?
Here is the blog post explaining AMP for Endpoints + CTA workflow for Incident Response: https://blogs.cisco.com/security/take-incident-response-to-the-next-level-with-amp-for-endpoints-and-cognitive-threat-analytics