You can now monitor, record, and perform current and historical threat investigations on your endpoints to determine the root cause analysis (RCA) across your entire environment.
For more information, For more information, refer to the Online Help topic: Threat Investigation.