Barracuda Managed XDR adds AI-powered natural language log search
Barracuda Managed XDR has integrated Databricks Genie to enable security analysts to query logs using natural language instead of SQL, accelerating threat investigations. This feature is built with row-level security in Unity Catalog to ensure tenant isolation across thousands of customers. The enhancement significantly reduces the time needed for routine investigations and frees up SOC analyst hours.
- →AI-powered natural language log search for security analysts
- →Tenant isolation enforced with Unity Catalog row-level security
- →Reduced investigation time and increased analyst productivity
- →Integration provides query context and audit trails
- →Multi-turn conversations and contextual follow-ups
Features (2) ›
- AI-powered natural language log search for security analysts
Barracuda Managed XDR now features an AI-Powered Log Search capability, utilizing Databricks Genie. This allows security analysts to query vast amounts of security logs from diverse sources using natural language, eliminating the need for SQL expertise and accelerating threat detection and response.
- Tenant isolation enforced with Unity Catalog row-level security
The new log search functionality incorporates row-level security within Databricks Unity Catalog to enforce strict tenant isolation. This ensures that each customer's data remains separate and secure, even when thousands of organizations share the same platform.
Enhancements (3) ›
- Reduced investigation time and increased analyst productivity
By enabling direct, natural language querying, Barracuda has reduced the time-to-insight for routine investigations from hours to minutes. This self-service capability empowers junior analysts and MSP technicians, freeing up senior analysts and saving an estimated 83-100 SOC analyst hours per month.
- Multi-turn conversations and contextual follow-ups
The feature supports multi-turn conversations, allowing analysts to refine their queries iteratively. Genie maintains context throughout the conversation, enabling more dynamic and efficient data exploration.
- Future roadmap includes saved searches and AI Assistant integration
Barracuda plans to further enhance the AI-Powered Log Search by adding functionality for saving and scheduling searches, integrating with Barracuda's AI Assistant for summarization, and enabling direct chart and visualization generation from query results.
Notes (1) ›
- Integration provides query context and audit trails
Genie displays the generated SQL alongside the natural language results, offering transparency and a learning opportunity for analysts. All queries are logged, providing an audit trail that aids in compliance with standards like SOC 2.
https://www.databricks.com/blog/barracuda-makes-security-logs-conversational-genie