CoreSense
Talk to us
AI agents

One agent leads. Eight specialists.

CoreSense gives your security team an AI team of its own. The CoreSense Agent takes your requests and coordinates specialists, each built for one job.

Leads the teamCoreSense Agent

Leads the team and coordinates the specialists. Give it a task in plain language and it puts the right agents to work.

In practiceAsk it to look into a user's alerts and it starts the Investigator and the Profiler, then brings back one answer.
SpecialistInvestigator

Investigates each alert and reaches a verdict with the evidence behind it.

In practiceAn endpoint alert fires at 2 a.m. By morning it has a verdict, the evidence and a recommended next step.
SpecialistEmail Inspector

Checks suspicious emails, from the sender to the links and attachments.

In practiceA user reports an unexpected invoice. The Email Inspector says whether it is safe, and why.
SpecialistCommand Decoder

Turns hidden and scrambled commands into plain language.

In practiceAn encoded PowerShell command runs on a laptop. The Decoder spells out that it downloads a file from an unknown site.
SpecialistProfiler

Builds the picture of the user or device behind an alert.

In practiceIs this sign-in normal for this person? The Profiler knows their usual devices, places and hours.
SpecialistHunter

Hunts for threats across your connected tools.

In practiceA new attack technique is in the news. The Hunter checks whether it has touched your environment.
SpecialistNetwork Analyst

Spots suspicious connections and unusual traffic.

In practiceA laptop contacts the same address every sixty seconds. The Network Analyst flags the pattern.
SpecialistCorrelator

Links related alerts and proposes a case when they belong together.

In practiceFailed sign-ins, a new mailbox rule and a large download on one account become one proposed case.
SpecialistReporter

Writes the summaries and reports your management reads.

In practiceEvery Monday, management gets a clear summary of what was investigated and what needs attention.

Select an agent to see what it does.

Teamwork

One request. The whole team on it.

The agents hand work to each other the way a good security team does. Watch one request, from the first question to the report.

Agent activityLIVE
  1. YouLook into the alerts on j.smith's account.
  2. CoreSense AgentStarting the Investigator on the newest alert and the Profiler on the user.
  3. InvestigatorEncoded command found in the alert. Handing it to the Command Decoder.
  4. ProfilerSign-in from a country this user has never worked from.
  5. Command DecoderThe command downloads a file from an unknown site.
  6. CorrelatorSix alerts on this account belong together. Case proposed.
  7. CoreSense AgentSuggesting a hunt for the same file on other devices.
  8. YouStart the hunt.
  9. HunterHunt running across your connected tools.
  10. Network AnalystInside the hunt: a laptop is calling the site every minute.
  11. ReporterSummary ready for management.
Agent Chat

Give the team its next task

Talk to the CoreSense Agent the way you would brief a colleague. It leads the team and works out which agents to involve.

  • Investigate this alertThe Investigator takes it, with help from the other specialists when needed.
  • Did any device talk to this address this week?The CoreSense Agent searches your connected tools and answers with where it found each fact.
  • Hunt for this file hash on every deviceThe Hunter runs the hunt, with the Network Analyst looking at the traffic, and reports what it finds.
  • Is this sign-in normal for her?The Profiler compares it with the user's usual devices, places and hours.
  • What does this command do?The Command Decoder explains it in plain language.
  • Summarize this week for managementThe Reporter writes a clear summary ready to share.