Analyze, investigate, and respond to incidents and alerts using the power of AI.
Trend Companion is an AI-powered cybersecurity chatbot that helps you to investigate, analyze, and
respond to Workbench alerts, generate Search app queries, and answer any cybersecurity
questions.
To use Trend Companion, your system administrator must opt in to all pre-release apps/services.
![]() |
Important
|
The following table outlines the available functions in Trend Companion.
Action
|
Description
|
Supported Apps
|
||
Open Trend Companion
|
Click the Trend Companion icon (
![]() ![]() |
All apps and screens in Trend
Vision One™
|
||
Enable generative AI capabilities
|
Some features require generative AI capabilities.
To enable generative AI capabilities, open Trend Companion and go to .
|
- | ||
Explain a Workbench alert
|
During alert investigations, Trend Companion can explain the alert displayed on your screen.
You can use prompts such as
Provide an explanation of this Workbench alert. |
|
||
Add response to case
|
Click Add to Case to add a response as a case note.
|
|
||
Add response to a Workbench alert note
|
Click Add to Note to add a response to the alert
notes.
|
|
||
Generate search queries
|
When using the Search app, Trend Companion can help you write search queries and decide what is the appropriate search method
for your query.
Begin your prompts with
Search foror Search into have Trend Companion create search queries. Example:
Search for all elements where the destination port is 80 |
|
||
Add generated search query to search box
|
Click Add to Search Query to add the generated
search query to the search box.
Trend Companion automatically selects the suggested search method when adding queries to the search
box.
|
|
||
Explain CLI commands in Workbench alerts, Search results, and Observed Attack Techniques
events
|
Right-click a CLI command element (
![]() Trend Companion can also provide explanations for CLI commands that include base64-encoded elements.
|
|
||
Explain events in Observed Attack Techniques
|
To learn about an event, you right-click an event or click
![]()
|
|