diff --git a/docs/AI-for-security/attack-discovery.asciidoc b/docs/AI-for-security/attack-discovery.asciidoc index e1ac8aa1ce..7b0d32431a 100644 --- a/docs/AI-for-security/attack-discovery.asciidoc +++ b/docs/AI-for-security/attack-discovery.asciidoc @@ -45,10 +45,10 @@ When you access Attack discovery for the first time, you'll need to select an LL .Recommended models [sidebar] -- -While Attack discovery is compatible with many different models, our testing found increased performance with Claude 3 Sonnet and Claude 3 Opus. In general, models with larger context windows are more effective for Attack discovery. +While Attack discovery is compatible with many different models, our testing found increased performance with Claude 3.5 Sonnet. In general, models with larger context windows are more effective for Attack discovery. -- + -image::images/select-model-empty-state.png[] +image::images/attck-disc-select-model-empty-state.png[] + . Once you've selected a connector, click **Generate** to start the analysis. diff --git a/docs/AI-for-security/images/attck-disc-select-model-empty-state.png b/docs/AI-for-security/images/attck-disc-select-model-empty-state.png new file mode 100644 index 0000000000..d773f1ec4b Binary files /dev/null and b/docs/AI-for-security/images/attck-disc-select-model-empty-state.png differ diff --git a/docs/AI-for-security/images/select-model-empty-state.png b/docs/AI-for-security/images/select-model-empty-state.png deleted file mode 100644 index 78608bbd21..0000000000 Binary files a/docs/AI-for-security/images/select-model-empty-state.png and /dev/null differ diff --git a/docs/serverless/AI-for-security/attack-discovery.mdx b/docs/serverless/AI-for-security/attack-discovery.mdx index 1603aea9ae..1fda68845a 100644 --- a/docs/serverless/AI-for-security/attack-discovery.mdx +++ b/docs/serverless/AI-for-security/attack-discovery.mdx @@ -34,20 +34,20 @@ When you access Attack discovery for the first time, you'll need to select an LL 2. Select an existing connector from the dropdown menu, or add a new one. -While Attack discovery is compatible with many different models, our testing found increased performance with Claude 3 Sonnet and Claude 3 Opus. In general, models with larger context windows are more effective for Attack discovery. +While Attack discovery is compatible with many different models, our testing found increased performance with Claude 3.5 Sonnet. In general, models with larger context windows are more effective for Attack discovery. -![Attack discovery empty state](../images/attack-discovery/select-model-empty-state.png) +![Attack discovery empty state](../images/attack-discovery/attck-disc-select-model-empty-state.png) 3. Once you've selected a connector, click **Generate** to start the analysis. It may take from a few seconds up to several minutes to generate discoveries, depending on the number of alerts and the model you selected. -Attack discovery is in technical preview and will only analyze opened and acknowleged alerts from the past 24 hours. By default it only analyzes up to 20 alerts within this timeframe, but you can expand this up to 100 by going to **AI Assistant → Settings () → Knowledge Base** and updating the **Alerts** setting. +Attack discovery is in technical preview and will only analyze opened and acknowleged alerts from the past 24 hours. By default it analyzes up to 100 alerts within this timeframe, but you can expand this up to 500 by clicking the settings icon next to the model selection menu and adjusting the **Alerts** slider. Note that sending more alerts than your chosen LLM can handle may result in an error. -![AI Assistant knowledge base menu](../images/ai-assistant/assistant-kb-menu.png) +![AI Assistant knowledge base menu](../images/attack-discovery/attck-disc-alerts-number-menu.png) diff --git a/docs/serverless/AI-for-security/images/attck-disc-alerts-number-menu.png b/docs/serverless/AI-for-security/images/attck-disc-alerts-number-menu.png new file mode 100644 index 0000000000..bcbb57ccce Binary files /dev/null and b/docs/serverless/AI-for-security/images/attck-disc-alerts-number-menu.png differ diff --git a/docs/serverless/images/ai-assistant/assistant-kb-menu.png b/docs/serverless/images/ai-assistant/assistant-kb-menu.png index 0f907cdf6f..71eb8278e3 100644 Binary files a/docs/serverless/images/ai-assistant/assistant-kb-menu.png and b/docs/serverless/images/ai-assistant/assistant-kb-menu.png differ diff --git a/docs/serverless/images/attack-discovery/attck-disc-alerts-number-menu.png b/docs/serverless/images/attack-discovery/attck-disc-alerts-number-menu.png new file mode 100644 index 0000000000..bcbb57ccce Binary files /dev/null and b/docs/serverless/images/attack-discovery/attck-disc-alerts-number-menu.png differ diff --git a/docs/serverless/images/attack-discovery/attck-disc-select-model-empty-state.png b/docs/serverless/images/attack-discovery/attck-disc-select-model-empty-state.png new file mode 100644 index 0000000000..d773f1ec4b Binary files /dev/null and b/docs/serverless/images/attack-discovery/attck-disc-select-model-empty-state.png differ