Using the Gemini Case summary widget
The Gemini Summary widget looks at the whole case (alerts, events, and entities) and provides an AI-generated case summary of how much attention the case might require. The widget also summarizes the alerts data for a better understanding of the threat, and provides recommendations for next steps to be taken for effective remediation.
The classification, summary, and recommendations all include an option to leave feedback as to the level of the AI accuracy and usefulness. The feedback is used to help us improve accuracy.
The Gemini Summary widget is displayed under the Case Overview tab in the Cases page. If there is only one alert in the case, you need to click the Case Overview tab to see this widget.
The Gemini Summary widget is not displayed for cases that are created manually or request cases that are initiated from Your Workdesk.
Provide feedback for Gemini Summary
If the results are acceptable, click the thumbs up icon. You can add more information in the Additional Feedback field.
If the results were not as expected, click the thumbs down icon. Select one of the options provided and add any other additional feedback that you think relevant.
Click Send Feedback.
Remove Gemini Summary
The Gemini Summary widget is included in the default view.
To remove the Gemini Summary widget from the default view, do the following:
Navigate to SOAR Settings > Case Data > Views.
Select Default Case View from the left side-panel.
Click the Delete icon on the Gemini Summary widget.