When breached, every second counts! Your SecOps team will be maxed out, your management team will be on high alert, and your customers will be annoyed. The faster you can respond and recover from the incident, the less you will suffer of consequences. Being able to work together as a team, sharing insights, ideas, traces and clues will exponentially speed up the recovery process. The NTA actively facilitates SecOps team collaboration in Incident Response by providing sharing of both search criteria created by specialist team members, and the associated search results. Outside experts, AI tools, and other helpful forces can easily be brought in on the process.