QD not only covers the functionalities of traditional ARK tools but also meets common requirements during the emergency response process. Using this tool can greatly improve the efficiency of emergency handling and quickly locate potential malicious items in the target environment.

The log export ability of QD allows ordinary users to easily and comprehensively extract various system information, while the import ability enables professionals to fully understand the conditions of the host from which the logs were exported, thus rapidly identifying suspicious activities within the system.

If you have threat intelligence resources at hand, combined with the structured logs exported by QD, you can build an automated threat analysis system (another form of sandbox).