chat
expand_more

Attribute Descriptions

A large language model generates detailed descriptions of each signal that our detection engine utilizes.

RD Dan Thumbnail v2

What is the item?

  • A large language model generates detailed descriptions of each signal that our detection engine utilizes.
  • This enables our email security analysts to better understand detection signals and deploy new detectors at Abnormal Security.

Why is it helpful to our customers?

  • This system enables our email security analysts to construct better detection rules.
  • This means that our detection engine stops more attacks faster and with fewer false positives.

Why is it interesting?

  • Signal discoverability is a major limiting factor in blue team productivity, and these kinds of improvements change the nature of analyst work.
  • This yields compounding effects on the quality of our detection engine.