AI platform for Threat Intelligence by Google

Google continues to develop the Agentic Platform within Google Threat Intelligence — an AI-driven platform designed to assist in incident investigations and identify emerging cyber threats.

The documentation explains platform capabilities, sample queries, and usage scenarios.

The platform enables analysts to: 🔵compile reports on current threats and adversary activity; 🔵analyze malicious campaigns and attack techniques; 🔵extract IoCs; 🔵research malware samples by hash (if the sample exists within the Google TI/VirusTotal ecosystem).

A separate focus is placed on malware analysis: the platform can perform deep-dive examination of samples using Google Threat Intelligence data to determine their purpose, behavior, and capabilities.

Google experts note that the platform's responses may contain inaccuracies or "hallucinations", and certain obfuscation techniques can complicate malware analysis. Therefore, it is recommended to verify findings and validate the platform's conclusions.

💬 Discuss