Managing Panther AI Response History

View, rename, pin, and delete previous AI responses

Overview

Panther AI response management is in open beta starting with Panther version 1.113, and is available to all customers. Please share any bug reports and feature requests with your Panther support team.

Panther AI response history for each alert and Search results set is preserved. This list of previous AI responses contains initial triage and summarization output (for alerts and Search events, respectively), as well as responses to prompts you have entered in the prompt bar. Each list of responses is specific to a certain alert or a certain Search.

You can view AI response history, rename AI responses, pin a certain AI response, and delete AI responses. These actions may be useful when generating multiple AI responses for one investigation.

By default, AI responses are deleted after 30 days; however, pinning or renaming a response will store it indefinitely.

AI response management features are available in the AI alert triage and Search results table AI summary AI entry points.

Viewing AI response history

To view AI response history for a given alert or search:

1. In either the AI alert triage or Search results table AI summary AI entry points, open the AI response slide-out panel by clicking View Panther AI Triage or View AI Summary, respectively.

   • If there is only one previously generated AI response for this alert or Search results set (for example, if you have only generated the initial triage or summary, but not run additional prompts), that response will be shown.

   • If there are more than one previously generated AI responses for this alert or Search results set, if an AI response has been pinned, that one will be shown. Otherwise, the most recent AI response will be shown.
2. At the top of the slide-out panel, click the name of the AI response.

   • A list of previous AI responses will be shown in descending order of creation. If there is a pinned response, it will appear at the top of the list.
   • To view a certain AI response, click its name.

Renaming an AI response

AI responses, by default, are named: <Triage or Summary> <id> - <date> <time>. For example:

It may be helpful to rename some of your AI responses to make it easier to organize and remember their contents. To rename an AI response:

From AI responses list

To rename an AI response from the AI responses list:

1. In either the AI alert triage or Search results table AI summary AI entry points, open the AI response slide-out panel by clicking View Panther AI Triage or View AI Summary, respectively.
2. At the top of the slide-out panel, click the name of the AI response.
3. In the resulting list of AI responses, hover over the response you'd like to rename.

4. On the right side of the row, click the three dots (More actions) icon, then Rename response.

   
5. Click Rename response.

6. Enter the new name, then press the Enter key or click the checkmark icon.

From AI response details

To rename an AI response from the response details:

1. View the AI response you'd like to rename.
2. At the top of the slide-out panel, hover over the AI response name.

3. Click the pencil icon (Rename response) icon that appears.
4. In the Response name field, enter the new name, then press the Enter key or click the checkmark icon.

Pinning an AI response

Pinning an AI response means that:

• It will be shown when you open the AI slide-out panel by clicking View Panther AI Triage or View AI Summary.

• When viewing the list of AI responses for a given alert or Search results set, it will be at the top.

It is only possible to pin an AI response if there is more than one response for a given alert or Search results set. Only one AI response may be pinned for a given AI responses list.

To pin an AI response:

From AI responses list

To pin an AI response from the AI responses list:

1. In either the AI alert triage or Search results table AI summary AI entry points, open the AI response slide-out panel by clicking View Panther AI Triage or View AI Summary, respectively.
2. At the top of the slide-out panel, click the name of the AI response.
3. In the resulting list of AI responses, hover over the response you'd like to pin.

4. On the right side of the row, click the three dots (More actions) icon, then Pin as default.

   

From AI response details

To pin an AI response using the Pin icon:

1. View the AI response you'd like to rename.
2. At the top of the slide-out panel, hover over the AI response name.

3. Click the pin icon (Pin as default) icon that appears.

Deleting an AI response

It is only possible to delete an AI response if there is more than one response for a given alert or Search results set. To delete an AI response:

1. In either the AI alert triage or Search results table AI summary AI entry points, open the AI response slide-out panel by clicking View Panther AI Triage or View AI Summary, respectively.
2. At the top of the slide-out panel, click the name of the AI response.
3. In the resulting list of AI responses, hover over the response you'd like to delete.

4. On the right side of the row, click the three dots (More actions) icon, then Delete response.