WatchGuard Orion is a multi-tenant threat hunting and incident response Cloud-native platform for SOCs that leverages security analytics, machine learning, and automation to proactively and efficiently uncover and responding unknown, sophisticated threats that have passed other security controls. It centralizes pre-built and customer detection analytics, real-time and 365-day retrospective visibility for effective hunting and full root cause analysis, a broad range of tools to deeply investigate and respond, and repeatable and extensible pre-built or custom incident investigations and playbooks with the native integration of the Jupyter Notebook environment.