{"id":52910,"date":"2026-01-02T07:37:10","date_gmt":"2026-01-02T14:37:10","guid":{"rendered":"https:\/\/swimlane.com\/?post_type=sw_resource&p=52910"},"modified":"2026-01-02T07:37:11","modified_gmt":"2026-01-02T14:37:11","slug":"agent-dia-denquete","status":"publish","type":"sw_resource","link":"https:\/\/swimlane.com\/fr\/resources\/videos\/investigation-ai-agent\/","title":{"rendered":"Agent d'enqu\u00eate IA h\u00e9ro\u00efque"},"content":{"rendered":"\n
\n
\n
<\/div><\/div>\n<\/div>\n\n\n\n
\n
\n

Videos<\/span><\/p>\n\n\n

Hero AI Investigation Agent<\/h1>\n\n\n

The Hero AI<\/a> Investigation Agent acts as the “brain” of your security operation, synthesizing information to build a complete picture of every incident.<\/span><\/p>\n

    \n
  1. Ingest:<\/b> It takes current case inputs and combines them with high-fidelity outputs from the MITRE ATT&CK D3FEND, Threat Intelligence, and Verdict Agents.<\/span><\/li>\n
  2. Analyze:<\/b> Using the NIST Incident Response Framework as a backbone, it evaluates the data against your customer-defined runbooks and knowledge-based articles.<\/span><\/li>\n
  3. Action:<\/b> It generates a prioritized response plan categorized into four critical phases:<\/span>\n
      \n
    • Containment:<\/b> Stop the threat from spreading.<\/span><\/li>\n
    • Eradication:<\/b> Remove the root cause.<\/span><\/li>\n
    • Recovery:<\/b> Restore normal operations.<\/span><\/li>\n
    • Hardening:<\/b> Strengthen defenses against future incidents.<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n