Attribute Descriptions
A large language model generates detailed descriptions of each signal that our detection engine utilizes.
What is the item?
A large language model generates detailed descriptions of each signal that our detection engine utilizes. This enables our email security analysts to better understand detection signals and deploy new detectors at Abnormal Security.
Why is it helpful to our customers?
This system enables our email security analysts to construct better detection rules. This means that our detection engine stops more attacks faster and with fewer false positives.
Why is it interesting?
Signal discoverability is a major limiting factor in blue team productivity, and these kinds of improvements change the nature of analyst work. This yields compounding effects on the quality of our detection engine.
