DataHelix AI
DataHelix AI
DataHelix AI provides a focused analytical workspace inside SOCAutomation for reviewing enriched entities, exploring AI-assisted research and working with high-volume event data. The application combines a dashboard, an interactive AI assistant and the shared EventBox interface to support rapid investigation and interpretation.
Use the pages below to understand each area of the application and how they fit together during day-to-day analysis.
Application Overview
The DataHelix AI application is designed to help analysts move from broad analytical context to detailed investigation. The dashboard surfaces activity trends and concentrations, the DataHelix AI Assistant supports guided research and question-led exploration, and EventBox provides a shared event-analysis view for drilling into the underlying data.
DataHelix Dashboard
Presents a high-level view of scans, entities, threats, afflictions and notable attack patterns across the selected time range.
DataHelix AI Assistant
Provides a conversational analysis experience that can return structured research summaries, contextual explanations and targeted guidance.
EventBox
Exposes the underlying events and sourcetype distributions used to support validation, exploration and further triage.
Integrated workflow
Together, these components support a practical flow from broad visibility to focused analysis and detailed evidence review.
DataHelix Dashboard
Understand the dashboard layout, summary metrics, timelines, source analysis and geographic views.
Open DocumentationDataHelix AI Assistant
Learn how the AI assistant supports structured research, conversational analysis and contextual investigation.
Open DocumentationEventBox
Review the shared EventBox interface for searching, visualising and analysing event data.
Open DocumentationVideo walkthrough placeholder
Add an embedded walkthrough for this section by inserting an <iframe> or <video> element and applying the is-visible class to this container.