Views:

Analyze, investigate, and respond to incidents and alerts using the power of AI.

Trend Companion is an AI-powered cybersecurity chatbot that helps you to investigate, analyze, and respond to Workbench alerts, generate Search app queries, and answer any cybersecurity questions.
To use Trend Companion, your system administrator must opt in to all pre-release apps/services.
Important
Important
  • Each user can send up to 100 messages per day and 10 messages per minute. The message limit resets every day at 00:00 UTC.
  • Prompts have a 500-character limit.
  • Trend Companion has filters to remove personal information from prompts.
The following table outlines the available functions in Trend Companion.
Action
Description
Supported Apps
Open Trend Companion
Click the Trend Companion icon (newCompanionIcon=GUID-20240819112525.jpg) to start a conversation.
All apps and screens in Trend Vision One™
Enable generative AI capabilities
Some features require generative AI capabilities.
To enable generative AI capabilities, open Trend Companion and go to Settings (gear_icon=fc9a51ad-35af-4fe3-92c6-5e41b2dfc5d9.png) → Turn On Generative AI.
 -
Explain a Workbench alert
During alert investigations, Trend Companion can explain the alert displayed on your screen.
You can use prompts such as Provide an explanation of this Workbench alert.
Add response to case
Click Add to Case to add a response as a case note.
Add response to a Workbench alert note
Click Add to Note to add a response to the alert notes.
Generate search queries
When using the Search app, Trend Companion can help you write search queries and decide what is the appropriate search method for your query.
Tip
Tip
Begin your prompts with Search for or Search in to have Trend Companion create search queries.
Example: Search for all elements where the destination port is 80
  • Search
Add generated search query to search box
Click Add to Search Query to add the generated search query to the search box.
Trend Companion automatically selects the suggested search method when adding queries to the search box.
  • Search
Explain CLI commands in Workbench alerts, Search results, and Observed Attack Techniques events
Right-click a CLI command element (cmd_icon=a5184412-0713-41ea-868c-b948a93e9fea.png) and choose Explain Command.
Trend Companion can also provide explanations for CLI commands that include base64-encoded elements.
Explain Observed Attack Techniques events
To learn about an event, right-click an event or click options=ddb0b67f-0654-4aa5-8bc7-48ec554c5448.png and choose Explain Event.
Important
Important
Trend Companion cannot explain events that contain only custom filters.
  • Observed Attack Techniques
  • Search
Create an investigation summary report for a case in Case Management
Do one of the following:
  • Click a case name to open the case details. From the Trend Companion list, select Summarize investigation report.
  • In Case Viewer, click a case. Click the three dots, and then click Summarize investigation report.
Trend Companion generates a threat investigation and remediation report for the case, which you can preview, edit, and download by going to Dashboards and Reports → Reports. This action is only available for Workbench cases with a “True positive” finding.
  
Summarize progress notes for a case in Case Management
Do one of the following:
  • Click a case name to open the case details. From the Trend Companion list, select Summarize progress notes.
  • In Case Viewer, click a case. Click the three dots, and then click Summarize progress notes.
Trend Companion summarizes all the notes created in the case since last time a summarized progress note was created. Summarized progress notes are helpful when transferring a case to a new owner.
 
Related information