FORENSIC UNDERSTANDING
From the first move.
To the full account.
Connect the entry point, activity, impact, and response in one clear account.
RECONSTRUCT THE STORY
Evidence connected.
Impact explained.
Connect identity activity across sources. Follow the timeline through email and files, access changes, and the response record.
LOOK BACK, AS WELL AS AHEAD
The history matters.
So do its limits.
Sentry looks back through available historical evidence to reveal activity that began before the current alert, connecting earlier actions to the incident under investigation.
MEET SENTRY SCAN
What’s in
your history?
You don’t need to suspect a compromise to take a closer look. Look back through up to six months of available activity. Get a PDF summary and Excel evidence report in 24–48 hours after connection.
Free assessment · No incident requiredRequest your free scan How Sentry Scan worksSentry ScanSAMPLE REPORT
A look beneath the surface.
Example environment · Historical assessment
02findings to review
Mailbox forwardingReview
Application accessReview
Identity timelineConnected
Illustrative findings. Your results depend on the available evidence.MEET SENTRY
See the story.
Take the next step.
Explore a connected view of identities, investigations, and evidence.