Fetch Gemini Data from API in SecOps

Hey @messier63 ,

We have an action called "Create Gemini Case Summary" under Siemplify integration. If the summary already exists, it will return the existing one and it will be accessible via action outputs. Is this what you are looking for?

hi  @ylandovskyy ,

Is it possible to modify and use the Gimini code for further use like analysing the case comments?

We have an integration called "Vertex AI", which allows you to execute prompts. You can use this integration with action "Get Case Details" from "Tools" powerup to fetch the comments and then ask questions about those comments.

For more details, refer to this post: https://www.googlecloudcommunity.com/gc/SecOps-SOAR/Leverage-GenAI-in-automation-with-Vertex-AI-integration/m-p/866693#M3503

hi @ylandovskyy 

i have one query, let's say I rerun the create gimini summary action 
now i have the entities which are enriched from various sources like VT ,Azure AD etc, and the enriched entity property has been added in each enriched entity 
so the gimini will read all those properties and the enrichment and generate the summary? 

Hey @messier63 

Let me confirm it internally, but from what I know the Gemini Case Summary only takes the context of case/alerts, but it doesn't go into individual properties of entities.

But what you can do is use the action "Describe Entity" from Vertex AI integration. It will summarise all of the enrichment associated with entities and render a widget for it.

hi ​@ylandovskyy ,

l want to use Vertex AI prompt , and i using that i want to analyze the comment from the case wall.

so my doubt is  if it is possible to  pass the image in the prompt from the comment and get the result.?

Hey ​@messier63 ,

I would suggest trying to convert the image to Base64 and pass it for analysis. Try it first in AI Studio to see, if it will actually work, but that would be the only way for now to submit any file.