Acclerating investigations by stitching data together from all data sources really going to add value . We also need to bring in UEBA data source and also automated rapid investigation to accelerate response (SOAR capability) and also adapt rules based on events and incidents.