Explain Investigation Query Results
Run an APL query for a chosen window and organize evidence related to your incident question.
/oo Axiom: Run this Axiom APL query for [start time] to [end time]: [APL query]. Explain the results for [investigation question] and identify missing context.