Inputs and triggers for Now Assist for Threat Intelligence Security Center

You can configure some of the inputs or triggers for a generative AI skill. Inputs or triggers permit you to determine how and when a skill is used.

Inputs and triggers

Inputs identify the data used for a skill. Inputs include the table and fields used to generate a threat case summary. A trigger initiates an action. For example, triggers determine when the system generates a summary.

You can modify inputs and triggers, but you can't modify a skill's data source. The data source contains the tables and fields that the skill relies on.

Case Summarization skill

Inputs for the Case Summarization skill identify the table and fields used when a threat case summary is generated. The following table lists the inputs for the Case Summarization skill from the Choose Input page in the Now Assist Admin console.

Input	Description
Data source	Case [sn_sec_tisc_case] table.
Input fields	Short description Description State Priority Work notes Automation Activity Case Type Notes Analysis and Findings Contributors TLP Recommendations or Actions Due date Updated Closure Summary (available when the case is in a closed state)
Related Input tables	MITRE Techniques Related Observables Related Indicators Related Objects Affected Assets Affected Services Case Task