Summarize a security incident with Now Assist for Security Incident Response

Understand the context of a security incident with the Security Incident summarization generative AI skill.

Before you begin

You can summarize a security incident in the legacy Core UI (UI16) and in the Security Incident Response Workspace. There must be a minimum of 50 words in the fields that are used for the input data to summarize an incident using generative AI. For more information about the input fields, see Inputs and triggers for Now Assist for Security Incident Response.

Roles required: sn_si.analyst, sn_si.manager, or sn_si.basic

About this task

Important: This generative AI skill is turned on by default. The skill will be automatically available to appropriate role users for the application. For more information, see Now Assist skills, agents, and agentic workflows on by default.

Procedure

1. In the legacy Core UI, navigate to All > Security Incident > Incidents and open a security incident that is assigned to you.

2. Alternatively, navigate to All > Security Incident > Security Incident Response Workspace and open a security incident that is assigned to you.

3. On the Overview tab, select Summarize.

   • The generated summary is displayed in a banner at the top of the security incident record in legacy Core UI16.
   • The generated summary is displayed on the Overview tab in the Security Incident Response Workspace.
   • Select from the following options after the summary is generated.

   Summaries generated by AI might miss key details. You might prefer to review the summary for accuracy and completeness before you proceed.