Google LLC today announced Agentic Threat Intelligence, a new conversational artificial intelligence platform designed to act as a virtual teammate for security teams and replace hours of manual threat research with fast, natural-language analysis.

Now available in preview for Google Threat Intelligence Enterprise and Enterprise+ customers, the new system is said by Google to represent a major leap forward in how organizations collect, correlate and act on cyberthreat intelligence.

Agentic Threat Intelligence is built on Google’s threat intelligence system, including data and insights from Mandiant and VirusTotal. It combines multiple specialized agents that focus on specific areas such as malware analysis, vulnerability research or actor profiling.

When a user asks a question, the system automatically determines which agents and tools to use, drawing from a mix of open web, open-source intelligence, dark web and Google’s curated datasets. Agentic Threat Intelligence then delivers a synthesized, human-readable summary that surfaces the key details, including threat actors, tactics, techniques, procedures and indicators of compromise, without requiring analysts to sift through endless reports and browser tabs.

The platform’s conversational interface allows security professionals to query it in plain language, in nearly any language, turning complex investigations into simple questions.

In some examples given by Google, an analyst could ask, “Analyze the recent supply chain attack targeting Company X” or “What is the impact of CVE-2023-XXXX?” and receive comprehensive findings within minutes.

Google claims the level of automation and intelligence will transform workflows from reactive investigation to proactive defense by allowing for faster identification of adversary behaviors and prioritization of vulnerabilities most relevant to an organization’s environment.

The agentic approach also helps analysts uncover hidden relationships between threat actors, malware families, vulnerabilities and campaigns that would otherwise be missed through manual research. Teams can generate executive-ready threat briefs, refine detection rules and strengthen response playbooks based on real-world intelligence by mapping the connections.

The result, according to Google, frees security professionals and teams “from the data-gathering grind” by allowing them to focus on higher-level tasks such as strategic analysis, proactive defense and communicating risk to leadership. Agentic Threat Intelligence can also be used to generate executive-level threat briefs and get detailed explanations of malicious files, while prompts can be saved for recurring tasks to make analysis consistent and efficient.

“The future of threat intelligence isn’t about more data; it’s about better, faster answers,” Google said in a blog post. “It’s about having a capable partner that can handle the heavy lifting of research so you can focus on securing your organization.”

Image: SiliconANGLE/Ideogram