New enhancements to the Sophos AI Assistant – Sophos Information

We’re happy to announce new options to the Sophos AI Assistant, which places simpler case triage and investigation, MDR-grade experience, guided workflows, and real-time menace looking instantly within the palms of each Sophos XDR and MDR buyer.

What’s the Sophos AI Assistant?

The Sophos AI Assistant is an built-in function in Sophos Central that makes use of giant language fashions (LLMs) and pure language understanding to allow all customers — from IT generalists to skilled SOC analysts — to question safety telemetry, enrich investigations, and take investigative actions without having to write down SQL-like queries.

It isn’t simply one other AI device — it’s experience from the workforce behind the world’s main Managed Detection and Response service, distilled into an clever agent. The AI Assistant is included for all Sophos XDR and MDR clients at no extra cost.

With this launch, the Sophos AI Assistant has been enhanced to help two key roles:

Safety Analyst – Targeted on case investigation and triage.
Risk Hunter – Targeted on proactive, exploratory investigations throughout the surroundings.

Getting began with the AI Assistant

Key capabilities on this launch

Up to date navigation in Sophos Central

The Sophos AI Assistant is now accessible from a brand new “AI” menu within the Sophos Central Admin console. This replace displays the growing significance of AI-powered instruments in analyst workflows and ensures simpler entry to AI-driven insights and actions—whether or not you’re responding to alerts, investigating incidents, or proactively looking threats.

New Safety Analyst and Risk Hunter assistants

This launch introduces a brand new AI assistant:

Safety Analyst assistant: Designed for triage, case administration, and investigation duties.
Risk Searching assistant: Provides help for proactive looking workflows, permitting analysts to discover telemetry, craft queries, and examine suspicious habits throughout the property.

Collectively, these new context conscious assistants unify reactive and proactive capabilities underneath a single, AI-powered interface.

Contextual workflows based mostly on analyst function

The AI Assistant now pulls in context based mostly on the operate an analyst is performing:

Safety Analysts obtain case-aware prompts, enrichment help, and streamlined investigation flows.
Risk Hunters are supplied with superior search recommendations, guided telemetry pivots, and customized immediate templates.

Whether or not you’re summarizing case findings or exploring detection anomalies, the AI Assistant ensures a seamless and role-aligned expertise.

Sensible immediate starters and in-workflow help

To cut back onboarding friction and enhance usability, Sophos has launched clever immediate recommendations tailor-made to widespread SOC actions. From gadget evaluation to pattern evaluations, the AI Assistant helps you body efficient queries and make knowledgeable choices—without having deep familiarity with question languages or telemetry schemas.

Use instances in motion

Alert triage: Rapidly summarize the context and associated detections
Investigation: Hint lateral motion utilizing command-line knowledge or consumer habits
Risk looking: Seek for PowerShell execution anomalies over time
Enrichment: Carry out dwell lookups on hashes, IPs, or domains

You may even add AI Assistant outputs instantly into your case notebooks, making certain that your insights and steps are preserved for auditing or handover.

Sophos Central Documentation – AI Assistant Use Circumstances

How one can write efficient prompts

We’ve printed a brand new greatest practices information for writing efficient AI prompts. This information helps you body questions extra clearly and exactly to make sure high-quality outcomes from the AI Assistant.

Ideas embrace: