Gravwell
AI DnA
Use case highlight: Assist
Gravwell Al Detect & Assist serves to enhance and extend analyst capabilities. With Logbot at their side, your humans can spend less time scouring over Microsoft docs to figure out what UserSid "S-1-5-18" means and more time focusing on answering important questions that require things humans are good at.
-1.png)
.png)
KEY ASSIST USE CASES:
- Detailed Technical Explanation Of Logs
- Summarized Overviews Of Multiple Log Entries
- Interactive Prompts For Follow-On Questions About Best
Practices, Common Pitfalls, Or Suggested Next
Investigative Steps
- Reference For Filling In Those Gaps In The “You Just
Learn Them” Nuggets:
- What Does The Zeek Conn State Sf Mean?
- What Does Usersid “S-1-5-18” Decode To?
- What Are The Most Common Alternate Ports For Http Traffc?
Gravwell AI DnA helps data
wardens to quickly understand
the state of a system and
identify critical issues.
For junior analysts, DnA can provide some detailed
explanations of often cryptic log formats which
helps analysts learn as they defend their
organizations.
.png)
Logbot isn’t limited to
search, but can also
power your automated
analysis. Get insights
into your alert
.png)