✦ AI-assisted forensic workspace

Reconstruct what happened.
Understand why.

Choose a server and an exact point in time. The investigator searches the evidence before, during and after the incident to build a defensible causal chain.

01CollectRaw evidence
02CorrelateTime + meaning
03ExplainCause + impact
Start an investigationAll times use the database server's local clock
Quick time:
  • The ProblemType field is required.
✦

The investigation starts with a moment

Enter the time when the symptom became visible. The engine will search backward for initiating conditions and forward for impact.

Event & alert logsAgent & scheduler jobsAudit activityCPU & memoryConnections & transactions