Correlation insights for records in Security Operations

  • Release version: Xanadu
  • Updated January 22, 2025
  • 1 minute to read

    • Generate correlation insights from the Now Assist panel to help you connect past events to the security incidents you are working on.

    You can use the related information you generate from existing security incident (SIR), incident (INC), change request (CHG), problem (PRB), and vulnerable item (VIT) records to avoid duplicating your investigation into the security incident you are working on. Get information about affected users, configuration items, and observables that already exists to help you resolve new security incidents more quickly.

    Figure 1. Returned results for correlation insights generated for a configuration item from the Now Assist panel for a security incident
    Returned results for correlation insights generated for a configuration item from the Now Assist panel for a security incident

    Generating correlation insights

    You can generate correlation insights with Correlation insights with Now Assist for Security Incident Response.

    Availability

    This skill is available in the workflow and product listed below.

    Table 1. Now Assist products and workflows
    Workflow Product
    Technology Now Assist for Security Incident Response