NLP Search Use Cases

When you use the Natural Language processing option in the Global Asset Search, you can ask questions about your assets and receive AI-generated answers. The following are some examples of questions you might ask based on your business context. Additionally, you can view the expected Query search input for each example.

Context	Question	Expected Query
As a security practitioner, I want to ensure that all my devices are scanned.	Show me all my recently scanned Assets	Assets HAS last_updated > "2024-03-11"
As a security practitioner, I want to control my most critical assets.	Show me my assets with high criticality rating	Assets HAS external_criticality_score >= 8
As a security practitioner, I want to know who is using my devices.	Show me all accounts connected to a device	Assets AS Account WITH Relationship = Account -> Device
As a security practitioner, I want to locate all the laptops within my organization.	Show me all devices with "laptop" in their hostname	Assets AS Device HAS host_name contains "laptop"
As a security practitioner, I want to find all of my computers impacted by CVE-2014-2014.	Show me all devices impacted by CVE-2014-2014	Assets AS Device WITH Weakness HAS weakness_name = "CVE-2014-2014"
As a security practitioner, I want to find all my devices that have a high vulnerability count and Asset Criticality Rating.	Show me my assets with high vulnerability count and ACR	Assets HAS Number of Total Weaknesses>10 AND ACR>5
As a security practitioner, I want to find all my accounts that have the name "admin".	Show me my accounts with the name "admin"	Assets AS Account Has Account name=”admin”
As a security practitioner, I want to view my most critical assets.	Show me my assets with ACR above 8	Assets HAS ACR>8
As a security practitioner, I want to prioritize my assets that have a high Asset Exposure Score.	Show me my assets with a high AES	Assets HAS AES>=800
As a security practitioner, I want to find all my devices with a weakness where the name contains the text "Missing MFA”.	Show me my accounts that have a weakness with "missing mfa" in the name	Assets AS Account WITH weakness HAS Weakness Name containers “missing mfa”