Views:

Analyze, investigate, and respond to incidents and alerts using the power of AI.

Trend Companion is an AI-powered cybersecurity chatbot. Companion can help you to investigate, analyze, and respond to Workbench alerts, generate Search app queries, and answer any cybersecurity questions.
To use Companion, your system administrator must opt in to all pre-release apps/services.
Important
Important
  • Each user can send up to 100 messages per day and 10 messages per minute. The message limit resets every day at 00:00 UTC.
  • Prompts have a 500-character limit.
  • Companion has filters to remove personal information from prompts.
The following table outlines the available functions in Companion.
Action
Description
Supported Apps
Open Companion
Click the Companion icon (companion-icon-bw.png) to start a conversation.
companion-icon-toolb.png
All apps and screens in Trend Vision One™
Enable generative AI capabilities
Some Companion features require generative AI capabilities.
To enable generative AI capabilities, open Companion and go to Settings (gear-icon.png) → Turn On Generative AI.
 -
Explain a Workbench alert
During alert investigations, Companion can explain the alert displayed on your screen.
You can use prompts such as Provide an explanation of this Workbench alert.
Add response to case
Click Add to Case to add a response as a case note.
Add response to a Workbench alert note
Click Add to Note to add a response to the alert notes.
Generate search queries
When using the Search app, Companion can help you write search queries and decide what is the appropriate search method for your query.
Begin your prompts with Search for or Search in to have Companion create search queries.
Example: Search for all elements where the destination port is 80
  • Search
Add generated search query to search box
Click Add to Search Query to add the generated search query to the search box.
Companion automatically selects the suggested search method when adding queries to the search box.
  • Search
Explain CLI commands in Workbench alerts, Search results, and Observed Attack Techniques events
Right-click a CLI command element (cmd-icon.png) and choose Explain Command.
Companion can also provide explanations for CLI commands that include base64-encoded elements.
Explain events in Observed Attack Techniques
To learn about an event, you right-click an event or click options.png and choose Explain Event.
Important
Important
Companion cannot explain events that contain only custom filters.
  • Observed Attack Techniques
Related information