Attribute Descriptions
A large language model generates detailed descriptions of each signal that our detection engine utilizes.
What is the item?
- A large language model generates detailed descriptions of each signal that our detection engine utilizes.
- This enables our email security analysts to better understand detection signals and deploy new detectors at Abnormal Security.
Why is it helpful to our customers?
- This system enables our email security analysts to construct better detection rules.
- This means that our detection engine stops more attacks faster and with fewer false positives.
Why is it interesting?
- Signal discoverability is a major limiting factor in blue team productivity, and these kinds of improvements change the nature of analyst work.
- This yields compounding effects on the quality of our detection engine.
