The FortiAI assistant can be used to navigate the GUI and perform actions. It can also be used to answer questions and query data.
The FortiAI assistant is operated using prompts. You can use natural language to request actions or information from the FortiAI assistant. If you enter a prompt that the FortiAI assistant does not understand, it will ask for more details to clarify your request. Responses from the FortiAI assistant may also include suggestions and requests for you to consider. For example, after responding to a query for information, the FortiAI assistant may ask if you would like help performing a related action, such as filtering log view or creating an event handler.
The FortiAI assistant's responses can include text, images, widgets, and data retrieved directly from your FortiAnalyzer environment.
Incident detection
FortiAI can help to create event handlers and event handler rules for incident detection. The event handlers can be created automatically according to your prompts, and the rules are customized to your environment.
Incident investigation
FortiAI can help to gather relevant information from multiple places in the FortiAnalyzer GUI. In addition, FortiAI can provide the context for the information, such as the threat information and the affected assets. Using these queries, you can perform an interactive investigation with FortiAI by asking follow-up questions, refining queries for information, and exploring different aspects of the incident to discover correlations within a single thread.
Incident response
FortiAI is integrated with playbooks and connectors for incident response automation. FortiAI can also support with post-incident reviews and compliance by generating detailed incident reports. Using these queries, you can collect many details related to the incident, including targeted endpoint information, event details, critical incident information, and the impact explanations. This information can be used to determine the root cause of the security threat and to initiate response measures.
Visibility and insights
FortiAI can generate custom charts and reports from the available log data. You can specify data sources, parameters, and choose the visualization type through a guided process with FortiAI.
