Streamline detection-to-response with Tines and Anvilogic

By connecting Anvilogic’s behavioral detections with Tines’ workflow automation capabilities, the detection-to-response pipeline is streamlined—reducing manual triage, boosting SOC efficiency, and delivering measurable response outcomes.

AI Event Triage with Anvilogic Copilot

Use Anvilogic Copilot, an AI-powered Security Operations Center (SOC) assistant, to analyze a Threat Identifier’s Event of Interest (EOI). Copilot will respond with a determination about the event, such as MALICIOUS or BENIGN, along with a report detailing its findings and reasoning. Learn more about Copilot here: https://public-docs.anvilogic.com/anvilogic-free-trial/monte-copilot

Tools

Anvilogic

Community author

Chris Burkhart at Anvilogic

Import

Explore Tines + Anvilogic pre-built workflows

AI Entity Enrichment with Anvilogic Copilot

Use Anvilogic Copilot, an AI-powered Security Operations Center (SOC) assistant, to analyze a wide range of security-relevant entities and Indicators of Compromise (IOCs). Copilot will respond with a determination about the entity, such as MALICIOUS or BENIGN, along with a report detailing its findings and reasoning. An entity can include—but is not limited to—an IP address, domain, URL, low-level command, script, or other artifact of interest. Learn more about Copilot @ https://public-docs.anvilogic.com/anvilogic-free-trial/monte-copilot

Tools: Anvilogic

By Chris Burkhart at Anvilogic

Analyze Anvilogic events of interest

Analyze an Anvilogic Threat Identifier using Monte Copilot, an AI-powered Security Operations Center (SOC) assistant, and automatically annotates the Alert in Anvilogic's App for Splunk.

Tools: Anvilogic, Splunk

Authors: Chris Burkhart and Jay Holladay at Anvilogic

Gather correlated Splunk searches and add to Anvilogic use cases

This story initiates a search that collects and correlates artifacts within Splunk Enterprise Security and its associated applications. It compiles all the action results from the search and integrates them into the use case engine in Anvilogic.

Tools: Anvilogic, Splunk

Use AI to Create Tines Case from Anvilogic Alerts

Use Anvilogic Copilot, an AI-powered Security Operations Center (SOC) assistant, to analyze Anvilogic alerts and create a Case in Tines.

Tools: Anvilogic

A major challenge in security is ensuring that you don’t bury yourself under alerts; it’s critical to filter false positives out before humans get involved. Having a tool like Tines helps us to be ready to onboard the next alert by empowering us to filter false positives, freeing up our time for more valuable tasks.

Mike Fountandez

Senior Security Engineer