🛡️ OmniStrike™ User Guide

# OmniStrike (shadow-xdr) — User Guide

**Port:** 8002 | **Category:** secops | **Caps:** 23

Extended Detection & Response — cross-source correlation, attack chain reconstruction, automated investigation

## Keyboard Shortcuts
/ search | t triage | m monitor | i investigate | a assistant | ? help | Cmd+K palette

## Capabilities (23)
- cross_source_correlation
- attack_chain
- automated_investigation
- threat_graph
- root_cause_analysis
- detection_analytics
- alert_enrichment
- entity_risk_scoring
- investigation_workbench
- mitre_mapping
- cross_domain_attack_canvas
- investigation_graph_memory
- ... and 11 more

## Actions (10)
- create_alert
- create_case
- isolate_host
- block_ip
- auto_investigate
- contain_impacted_entities
- launch_cross_domain_sweep
- publish_attack_story

## AI Features
- PounceSOC™ (auto-triage)
- PounceForge™ (agentic investigation)
- WraithMind™ (AI assistant)
- ShadowNeural™ (ML detection)

## Managed Services
- managed XDR
- 24/7 detection & response
- threat hunting
- managed xdr content tuning
- cross-domain incident review
- xdr optimization service