Skip to content

Commit

Permalink
Creates "AI for security" section (#5443)
Browse files Browse the repository at this point in the history
* first test of new org

* fixes build error

* updates landing pages

* incorporates Nat's review

(cherry picked from commit d32f517)
  • Loading branch information
benironside authored and mergify[bot] committed Jun 24, 2024
1 parent 47216c6 commit d8f9a01
Show file tree
Hide file tree
Showing 38 changed files with 35 additions and 24 deletions.
File renamed without changes.
File renamed without changes.
24 changes: 24 additions & 0 deletions docs/AI-for-security/ai-for-security.asciidoc
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
[[ai-for-security]]
= AI for security

:frontmatter-description: Learn to use AI capabilities in {elastic-sec}.
:frontmatter-tags-products: [security]
:frontmatter-tags-content-type: [overview]
:frontmatter-tags-user-goals: [get-started]

You can use {elastic-sec}'s built-in AI tools to speed up your work and augment your team's capabilities. The pages in this section describe <<security-assistant, AI Assistant>>, which answers questions and enhances your workflows throughout {elastic-sec}, and <<attack-discovery, Attack discovery>>, which speeds up the triage process by finding patterns and identifying attacks spanning multiple alerts.

include::security-assistant.asciidoc[leveloffset=+1]
include::attack-discovery.asciidoc[leveloffset=+1]

include::llm-connector-guides.asciidoc[leveloffset=+1]
include::azure-openai-setup.asciidoc[leveloffset=+2]
include::connect-to-bedrock.asciidoc[leveloffset=+2]
include::connect-to-openai.asciidoc[leveloffset=+2]

include::ai-use-cases.asciidoc[leveloffset=+1]
include::ai-alert-triage.asciidoc[leveloffset=+2]
include::use-attack-discovery-ai-assistant-incident-reporting.asciidoc[leveloffset=+2]
include::ai-esql-queries.asciidoc[leveloffset=+2]

include::llm-performance-matrix.asciidoc[leveloffset=+1]
10 changes: 10 additions & 0 deletions docs/AI-for-security/ai-use-cases.asciidoc
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
[[assistant-use-cases]]
= Use cases

The guides in this section describe use cases for AI Assistant and Attack discovery. Refer to them for examples of each tool's individual capabilities and of what they can do together.

* <<assistant-triage>>
* <<attack-discovery-ai-assistant-incident-reporting>>
* <<esql-queries-assistant>>

For general information, refer to <<security-assistant, AI Assistant>> or <<attack-discovery, Attack discovery>>.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
File renamed without changes
Original file line number Diff line number Diff line change
Expand Up @@ -189,14 +189,3 @@ In addition to practical advice, AI Assistant can offer conceptual advice, tips,
* “I need to monitor for unusual file creation patterns that could indicate ransomware activity. How would I construct this query using EQL?”


include::assistant-use-cases.asciidoc[leveloffset=+1]
include::ai-alert-triage.asciidoc[leveloffset=+2]
include::use-attack-discovery-ai-assistant-incident-reporting.asciidoc[leveloffset=+2]
include::ai-esql-queries.asciidoc[leveloffset=+2]

include::llm-connector-guides.asciidoc[leveloffset=+1]
include::azure-openai-setup.asciidoc[leveloffset=+2]
include::connect-to-openai.asciidoc[leveloffset=+2]
include::connect-to-bedrock.asciidoc[leveloffset=+2]

include::llm-performance-matrix.asciidoc[leveloffset=+1]
10 changes: 0 additions & 10 deletions docs/assistant/assistant-use-cases.asciidoc

This file was deleted.

Binary file removed docs/attack-discovery/images/icon-add-to-timeline.png
Binary file not shown.
Binary file removed docs/attack-discovery/images/icon-copy.png
Binary file not shown.
4 changes: 1 addition & 3 deletions docs/index.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -18,9 +18,7 @@ include::getting-started/index.asciidoc[]

include::getting-started/security-ui.asciidoc[]

include::assistant/security-assistant.asciidoc[]

include::attack-discovery/attack-discovery.asciidoc[]
include::AI-for-security/ai-for-security.asciidoc[]

include::dashboards/dashboards-overview.asciidoc[]

Expand Down

0 comments on commit d8f9a01

Please sign in to comment.