Purple AI Strengthens Cybersecurity with Behavioral AI

The intersection between cybersecurity and artificial intelligence is growing wider and more dynamic. SentinelOne is part of this intersection with Purple AI, a platform that aims to leverage behavioral AI to transform the way security analysts interact with threats and vulnerabilities.

SentinelOne’s Chris Boehm discusses behavioral AI with theCUBE.

“This is a generative AI capability based on our dataset,” said Chris Boehm (photo), Global Field Information Security Lead at SentinelOne Inc. “It started out as an LLM technology based on endpoint security telemetry. It could handle emails, it could handle digests, it could create code. It’s pretty amazing. We’re using our expertise, our knowledge, and the IT flows that we use to leverage our partners to enrich that experience and make it a great coordination for security teams, partners, and analysts.”

Boehm spoke to CUBE Research John Fourier And Savannah Peterson has mWISE 2024during an exclusive broadcast on theCUBE, SiliconANGLE Media’s live streaming studio. They discussed behavioral AI as a key differentiator for SentinelOne, enabling the identification of emerging threats before they become full-blown crises. (*Disclosure below.)

Behavioral AI: Analyzing the Strategic Collaboration with Mandiant

Purple AI allows security professionals to access data insights through natural language queries. Analysts can simply ask for emerging threats in their environment, and the platform provides coordinated and comprehensive insights. These features make the tool ideal for analyzing complex data sets, creating an efficient workflow that easily coordinates multiple layers of security, according to Boehm.

“It’s all coordinated on-site, very seamlessly and easily for you,” he said. “It’s live today; it’s not vaporware. Even at Black Hat, we did a live demo so that anyone in the audience could come and put their hands on a keyboard and go head-to-head with Purple AI against a security analyst.”

Another key development is SentinelOne’s collaboration with Mandiant Inc. SentinelOne integrates Mandiant’s threat data directly into its platform, making it available to customers. This collaboration enhances threat detection and response capabilities by combining SentinelOne’s behavioral AI with Mandiant’s intelligence, Boehm explained.

“Every partner is an asset to us, but Mandiant is something special,” he said. “It’s the only OEM threat intelligence solution that we offer that’s built into our platform, for example. I always say that’s the cornerstone of our trust in Mandiant, and we want it to be available to all of our customers.”

Here’s the full video interview, part of SiliconANGLE and theCUBE Research’s coverage of mWISE 2024:

(*Disclosure: SentinelOne Inc. sponsored this segment on theCUBE. Neither SentinelOne nor other sponsors have editorial control over the content on theCUBE or SiliconANGLE.)

Photo: SiliconANGLE