The key value of an XDR platform is the ability to see events that seem benign to a single tool, but become apparent when looking at the intelligence provided by multiple data sources. Custom leads should be able to include boolean AND/OR conditions referencing multiple data sources within a single lead. (Screen mock up attached).