Google Cloud today announced the general availability of its Duet AI in Security Operations. The service is designed to empower security teams to protect their organizations more effectively by harnessing the power of generative artificial intelligence (genAI) to accelerate threat detection, investigations and response.
Duet AI is a genAI-powered assistance that is embedded in Google Workspace and Google Cloud. The tech giant claims the tool can summarize and classify threat information, translate natural language searches into queries and offer suggested next steps for remediating issues.
Google integrated Duet AI with its Chronicle Security Operations service, which is a cloud software suite that unifies Chronicle’s security information and event management (SIEM) tech with the security orchestration, automation and response (SOAR) solutions from Google’s Siemplify acquisition and threat intelligence from Google Cloud and Mandiant.
[Related: Google releases new multimodal AI tools for enterprises]
How to use Google Cloud's Duet AI in SecOpsThe tech giant claims Duet AI in Security Operations is designed to improve search efficiency, offer automated summaries and shorten the incident response time for SecOps teams. Its capabilities include the following:
- Natural language query translation: Users can input a query in natural language, such as inquiring about potential fraudulent crypto mining attacks in the Google Cloud environment, and Duet AI will translate this input into a specific, unified data model query.
- Running searches: Duet AI can run searches across all event data and provide feedback on the query, rewrite it or generate a rule from it.
- Case summary and analysis: Duet AI can provide a summarized overview of the case, including details of the incident and why it's a concern.
- Response recommendations: Duet AI in Security Operations is powered by a specialized large language model that's optimized for security use cases. It also can offer recommendations for the next steps to support incident remediation.
Google Cloud introduced the addition of Duet AI into Chronicle Security Operations earlier this year and more than 150 of its customers participated in the product preview.
Google claims less than 1% of requests received a “negative” rating by users and early use feedback showed the service reduces the time security analysts spend writing, running and refining searches and triaging complex cases by about seven times.
Pfizer is one of the early users and the company noted the Chronicle Security Operations service already shortened the data source aggregation and analysis time from days to seconds and Duet AI is potentially able to further increase the effectiveness of its security team.
“The ability to use natural language queries to perform complex analysis will help new analysts on-board faster and let seasoned analysts rapidly pursue advanced threats across our complex environment," Guy Delp, VP of global information security at Pfizer said in a statement.
Comments