Skip to content

Commit 4505b20

Browse files
committed
Clean up for review
1 parent c479009 commit 4505b20

File tree

2 files changed

+12
-12
lines changed

2 files changed

+12
-12
lines changed

blog-cse/2025-11-21-application.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -9,23 +9,23 @@ hide_table_of_contents: true
99

1010
import useBaseUrl from '@docusaurus/useBaseUrl';
1111

12-
### AI tools for insight investigation (beta)
12+
### AI tools for insight investigation (Beta)
1313

14-
We're excited to announce two new powerful AI capabilities to assist in your Security Operation Center (SOC) team's investigation of Cloud SIEM insights:
15-
* SOC Analyst Agent in Cloud SIEM
16-
* Investigation Agent in Mobot
14+
We're excited to announce two new AI tools to assist in your Security Operation Center (SOC) team's investigation of Cloud SIEM insights:
15+
* SOC Analyst Agent
16+
* Investigation Agent
1717

18-
These powerful AI tools will improve the speed and accuracy of your SOC team to investigate threats.
18+
These powerful AI tools are designed to improve the speed and accuracy of your SOC team's threat investigations.
1919

2020
#### SOC Analyst Agent
2121

2222
A new **AI Investigation** tab in Cloud SIEM provides an AI-generated analysis of insights that accelerates investigation and troubleshooting by your SOC team. The information in the tab is generated by Sumo Logic's SOC Analyst Agent, an agentic AI tool.
2323

2424
<img src={useBaseUrl('img/cse/ai-investigations-tab-in-release-note.png')} alt="Insight AI Investigation tab" style={{border: '1px solid gray'}} width="800" />
2525

26-
#### Investigation Agent in Mobot
26+
#### Investigation Agent
2727

28-
When you select the **Ask Mobot** button on the new **AI Investigation** tab, the insight's AI-generated information is launched in Sumo Logic Mobot. There you can use the Sumo Logic Investigation Agent to drill down into the insight for greater detail.
28+
When you select the **Ask Mobot** button on the new **AI Investigation** tab in Cloud SIEM, the insight's AI-generated information is launched in Sumo Logic Mobot. There you can use Sumo Logic's Investigation Agent to drill down into the insight for greater detail.
2929

3030
<img src={useBaseUrl('img/cse/insight-agent-in-mobot.png')} alt="Mobot Investigation Agent" style={{border: '1px solid gray'}} width="600" />
3131

docs/cse/get-started-with-cloud-siem/ai-investigation-of-insights.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ description: Learn how to perform investigations of a Cloud SIEM insights assist
1313

1414
import useBaseUrl from '@docusaurus/useBaseUrl';
1515

16-
The **AI Investigation** tab in the details page of a Cloud SIEM insight is an AI-generated analysis of the insight that accelerates investigation and troubleshooting by your Security Operations Center (SOC) team. The information in the tab is generated by Sumo Logic's SOC Analyst Agent, an agentic AI tool.
16+
The **AI Investigation** tab in the details page of a Cloud SIEM insight is an artificial intelligence-generated analysis of the insight that accelerates investigation and troubleshooting by your Security Operations Center (SOC) team. The information in the tab is generated by Sumo Logic's SOC Analyst Agent, an agentic AI tool.
1717

1818
The SOC Analyst Agent performs two distinct jobs that mirror an analyst’s daily responsibilities:
1919
* **Triage**. Delivers automated verdicts on insights using evidence-backed
@@ -24,8 +24,8 @@ the scope, context, and likely impact of an event.
2424
## View the AI Investigation tab
2525

2626
1. [**New UI**](/docs/get-started/sumo-logic-ui). In the main Sumo Logic menu select **Cloud SIEM > Insights**. You can also click **Go To...** at the top of the screen and select **Insights**. [**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main menu select **Cloud SIEM** and then click **Insights** at the top of the screen.
27-
1. On the insights list page, click an insight.
28-
1. The insight details are displayed. The **AI Investigation** tab for the insight shows the results of the AI analysis:<br/><img src={useBaseUrl('img/cse/insight-ai-investigation-tab.png')} alt="Insight AI Investigation tab" style={{border: '1px solid gray'}} width="800" />
27+
1. On the insights list page, select an insight.
28+
1. The **AI Investigation** tab shows results of AI analysis:<br/><img src={useBaseUrl('img/cse/insight-ai-investigation-tab.png')} alt="Insight AI Investigation tab" style={{border: '1px solid gray'}} width="800" />
2929
1. **Severity Verdict**. Details about the insight's severity analysis:
3030
* **Current Severity**. The severity of the insight as set by the cumulative activity score for the insight. For more information, see [About insight severity](/docs/cse/get-started-with-cloud-siem/insight-generation-process/#about-insight-severity).
3131
* **Global Confidence Score**. A level of confidence that the insight is actionable, predicted by Sumo Logic’s Global Intelligence machine learning model. See [What is a Global Confidence score?](/docs/cse/records-signals-entities-insights/global-intelligence-security-insights/#what-is-a-global-confidence-score).
@@ -41,7 +41,7 @@ the scope, context, and likely impact of an event.
4141
Help us refine the tool by using the thumbs-up or thumbs-down buttons to provide feedback on the effectiveness of the summary presented. Clicking the thumbs-down button gives you the opportunity to provide additional feedback.
4242
:::
4343
1. **Key Findings**. The main points uncovered by AI analysis. Details about these findings can be found in the signals that fired for the insight.
44-
1. **Ask Mobot**. Click to send the AI analysis of the insight to Sumo Logic Mobot for further investigation.
44+
1. **Ask Mobot**. Click to send the AI analysis of the insight to [Sumo Logic Mobot](#investigate-the-insight-in-mobot) for further investigation.
4545

4646
### Filter for AI verdicts
4747

@@ -81,7 +81,7 @@ Unlike traditional correlation logic, which is static, the SOC Analyst Agent app
8181

8282
### What data does the agent rely on to render verdicts?
8383

84-
The agent draws from normalized security data (`sec_record*` indexes and signals), correlated entities, Sumo Logic’s integrated threat intelligence feeds, and enrichment data (for example, geo-IP, user behavior, asset details).
84+
The agent draws from normalized security data (`sec_record*` indexes and signals), correlated entities, Sumo Logic’s integrated threat intelligence feeds, and enrichment data (for example, IP geolocation, user behavior, and asset details).
8585

8686
### Can analysts provide feedback or correct AI verdicts?
8787

0 commit comments

Comments
 (0)