Events

In September 2025, Red Canary introduced a new user experience called Investigations to give you insight into even more of the work our analysts do while protecting your environment.

In the context of Investigations, events are now referred to as Investigative leads. They still represent an individual activity that our detection engine identified as potentially threatening, but are now grouped under an Investigation to show how multiple activities might be related to each other (and thus investigated together). For more information, see Investigations.

Should you need it, the Events page is still available but has been moved under the Investigations section in the Red Canary portal.