Analyze, investigate, and respond to incidents and alerts using the power of AI.
Trend
Vision One™—Companion is an AI-powered chatbot for cybersecurity. Companion can help you to:
-
Investigate, analyze, and respond to Workbench alerts.
-
Generate search queries for the Search app.
-
Answer any questions related to cybersecurity.
To use Companion, your system administrator must opt in to all pre-release apps/services.
![]() |
Important
|
The following table outlines the available functionality in Companion.
Action
|
Description
|
Supported Apps
|
Open Companion
|
Click the Companion icon (
![]() ![]() |
All apps and screens in Trend
Vision One™
|
Enable generative AI capabilities
|
Some Companion features require generative AI capabilities to work.
To enable Companion's generative AI capabilities, open companion and go to
|
- |
Explain a Workbench alert
|
During alert investigations, Companion can explain the alert
displayed on your screen.
You can use prompts such as
Provide an explanation of this Workbench alertto ask Companion to explain a Workbench alert. |
|
Add response to case
|
Click Add to Case to add a response as a case note.
|
|
Add response to a Workbench alert note
|
Click Add to Note to add a response to the alert
notes.
|
|
Generate search queries
|
When using the Search app, Companion can help you write search queries and decide what is the appropriate
search method for your query.
Begin your prompts with
Search foror Search into have Companion create search queries. Example:
Search for all elements where the destination port is 80 |
|
Add generated search query to search box
|
Click Add to Search Query to add the generated
search query to the search box.
Companion automatically selects the suggested search method when
adding queries to the search box.
|
|
Explain CLI commands in Workbench alerts, Search results, and Observed Attack Techniques
events
|
Right-click a CLI command element (
![]() Companion can also provide explanations for CLI commands that include base64-encoded
elements.
|
|