Attention and fleet activity

Ask questions and find impact

Review recorded state over time

Review past CVE exposure

Target endpoints and collection

Define collected evidence