Computers generate many different log files and alerts, but sifting through the mess to look for relevant information during an attack can be difficult. VMware Carbon Black gathers and organizes the data to make it easier for incident response teams to analyze attacks, hunt for the sources of attacks, and react quickly to contain and stop attacks. Once the attacks have been contained and remediated the solution provides tools to document the process for reporting.