Security alert enrichment with threat context — automated

For every suspicious-activity ticket the scenario finds matching attack techniques and adds a clear explanation right into the ticket. Your analyst gets the context ready-made.

  • Threat context attached to every ticket automatically
  • Semantic search across the attack-technique library Qdrant
  • Tickets updated right inside Zendesk
  • Analysts triage instead of researching by hand
Embeddings OpenAIDefault Data LoaderQdrant Vector Store
Connect Qdrant and launchScriptera

How it works

To get SSH notifications in Qdrant, you don't need a developer: a ready-made scenario watches events and sends messages for you.

  1. Starts when: When chat message received
  2. Then: AI Agent
  3. Then: OpenAI Chat Model
  4. Then: Split Out
  5. Then: Embed JSON in Qdrant Collection
  6. Then: Embeddings OpenAI1
  7. Then: Default Data Loader
  8. Then: Token Splitter1
  9. Then: Window Buffer Memory
  10. Then: Embeddings OpenAI2
  11. Then: Extract from File
  12. Starts when: When clicking ‘Test workflow’
  13. Then: Pull Mitre Data From Gdrive
  14. Then: AI Agent1
  15. Then: Update Zendesk with Mitre Data
  16. Check: Loop Over Items
  17. Then: OpenAI Chat Model1
  18. Then: Embeddings OpenAI
  19. Then: Structured Output Parser
  20. Then: Query Qdrant Vector Store
  21. Then: Qdrant Vector Store query
  22. Then: Get all Zendesk Tickets

You can launch this SSH + Qdrant integration in Scriptera: describe the task in plain words — the scenario is built, launched and monitored for you.

Similar scenarios