AI-generated case summaries - AI generated case summaries helps you quickly understand the scope and nature of the case by summarizing key case details. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

To gain immediate situational awareness, Cortex XSIAM automatically builds a narrative of the case using AI-generated titles and descriptions. This summarized context allows you to quickly grasp the scope of a case and provides a clear starting point for your investigation.

Leveraging LLM-based summarization, the system analyzes complex data to produce a human-readable overview of:

When you open a case, the case title and summary is automatically generated. As an investigation evolves, the case context is updated. Each time new data or issues are added, the system regenerates the title and description to ensure your situational awareness reflects the most current information available.

In addition to the AI-generated case titles and summaries, Cortex XSIAM automatically generates static case titles and descriptions that are stored in the cases dataset. These are generated at the time of case creation based on correlated issues, behaviors, and contextual data.

These static descriptions are used when AI-generated case summaries are unavailable or disabled. In addition, they are reflected in the case title in the List of cases in the Split view, and the Case Name and Case Description columns in the Table view.

You can manually update these values. From the Actions menu select Edit case details.

For cases that contain a single issue, the case title and description directly reflect the issue’s title and description. In addition, AI-generated case summaries are not available. If more issues are linked to the case, Cortex XSIAM generates a case title and description to reflect the issues in the case, and a AI case title and summary is available.

To enable AI case summarization on your tenant, go to Configurations → General → Server Settings → AI Configuration and enable the following settings:

You can also turn AI summarization on or off for a specific case. Take the following steps: