Cortex Assistant is designed to streamline processes by simplifying case triaging, investigation, and remediation. It enables you to seamlessly uncover new insights on hashes, hosts, and more. You can get tailored suggestions, and run actions in natural language from anywhere without losing context.
Cortex Assistant is an innovative tool specifically developed to streamline various processes, including case triaging, investigation, and remediation. By utilizing Cortex Assistant, you can uncover valuable insights on a wide range of entities such as hashes, hosts, and more. Its primary objective is to simplify these tasks, allowing for a more efficient workflow and enhanced productivity.
Note
If you are in an eligible region and have enabled the Cortex Agentic Assistant, the Cortex Agentic Assistant replaces the Cortex Assistant. The Cortex Assistant is available if you do not have access to the Cortex Agentic Assistant based on the tenant region or you have not enabled it. For more information, see Cortex Agentic Assistant.
One of the key features of Cortex Assistant is its ability to provide personalized suggestions based on your specific needs and context. This helps you find the most relevant information and solutions quickly and effortlessly.
Cortex Assistant allows users to execute commands using natural language from anywhere within the interface. This means that users can interact with the tool seamlessly, without losing their train of thought or context.
Access Cortex Assistant
Cortex Assistant is conveniently accessible from the main menu in the left pane, ensuring easy navigation and usage. Alternatively, you can right-click on specific entities, such as an asset name or IP address, and select Open in Cortex Assistant to immediately open the Cortex Assistant with a focus on that entity.
To increase usability, you can create a personalized keyboard shortcut: → → → and choose the shortcut you want to use. You can use this shortcut anytime, from anywhere within Cortex Cloud, to instantly open Cortex Assistant. If you highlight an entity and open Cortex Assistant with the keyboard shortcut, it will open with a focus on that entity.
What can Cortex Assistant do for you?
Perform investigations of entities such as cases, hashes, hosts, domains, IP addresses, and users, using advanced XQL queries and activate tailored responses.
Use Cortex Assistant as a navigation tool to search for information, perform common investigation tasks, or initiate response actions.
Responsible AI
Cortex Assistant is developed in accordance with responsible AI principles. Customer data is not used to train the AI models, and your data is private and secure. For added security, user prompts are processed within the tenant's region. Safety and security measures include user confirmation for write actions and adherence to RBAC permissions. At the same time, explainability is maintained by providing the logic behind answers and offering a feedback option for user opinions.