Understand the full context of a security incident by seeing related activities on an Incident Timeline. Security Agent analyzes Event Monitoring logs to provide a complete view of what happened before, during, and after an anomaly was detected. This context eliminates manual data correlation and accelerates the investigation process.
Where: This change applies to Lightning Experience in Enterprise, Performance, Unlimited, and Developer editions with Security Center and Agentforce Platform add-on subscriptions.
Security Center with Agentforce is a pilot or beta service that is subject to the Beta Services Terms at Agreements - Salesforce.com or a written Unified Pilot Agreement if executed by Customer, and applicable terms in the Product Terms Directory. Use of this pilot or beta service is at the Customer's sole discretion.
When: This functionality is available May 11, 2026.
Who: This feature is available to customers with a Security Center license and the Agentforce add-on. To get full functionality, customers also need an Event Monitoring license.
How: From the Investigations tab in your Security Center setup, click on the name of any investigation to see details, including the Incident Timeline.