June 2024 Summaries

In the evolving landscape of generative AI, implementing models within enterprise environments introduces distinct challenges, such as safeguarding against hallucinations, ensuring data security, and addressing legal concerns. Tines emphasizes the necessity of AI guardrails to maintain safety, privacy, and reliability, focusing on preventing the misuse of AI and protecting sensitive data. These guardrails are vital for reducing false outputs, safeguarding data privacy, and mitigating compliance risks. Tines prioritizes security and privacy by design, ensuring that data involved in AI interactions is neither stored nor used for training purposes, thereby maintaining user trust. Utilizing platforms like Amazon Bedrock and AWS PrivateLink, Tines offers a secure AI solution that is scalable and easy to implement, ensuring that AI systems operate within a secure infrastructure without exposing data to external threats. The responsibility for establishing these guardrails lies with both AI developers and governments, necessitating a collaborative approach to regulate and secure AI technologies globally.

Tines has introduced a revamped navigation experience designed to enhance usability by reorganizing main menus to prioritize core areas, making features such as a new dashboard management page and cases views more accessible. The update includes the addition of a Multi Request credential type, enabling the creation of two HTTP requests within a single credential for services like Vault or CyberArk Secrets Hub, streamlining the authentication process. Users can now also use dashboards for records, expanding functionality beyond cases, and define inputs for sub-stories in the Send to Story feature for improved clarity and efficiency. Additional updates include options to force user session expiration, retrieve raw email messages, support JIT login syncing for enterprise tenants, enable image analysis with AI action, and download events directly from the Event Panel.

Vulnerability management is a critical process for identifying, assessing, and mitigating risks in a company's IT infrastructure, but it faces challenges due to the complexity of modern environments, the volume of vulnerabilities, and resource constraints. To address these challenges, automation and orchestration tools like Tines are increasingly utilized to streamline processes, enhance decision-making, and improve response times. Tines offers security teams a flexible and intuitive platform to automate workflows, integrate various tools, and manage vulnerabilities consistently and accurately across diverse systems. Case studies from organizations like Greenlight and BCM One demonstrate the significant time savings and improved efficiency achieved through automated vulnerability management, highlighting Tines' capability to enable teams to focus on high-impact security tasks. By leveraging Tines, security teams can scale their operations and optimize their use of existing tools, ultimately strengthening their overall security posture.

The rapid integration of AI into business functions is generating significant media attention, with varying opinions on the speed of adoption, yet many technology executives have paused AI programs to establish guidelines. AI's potential to revolutionize data analysis is highlighted by its ability to access and process previously invisible unstructured data, unlike traditional methods that struggled with data from digital transformation and IoT devices. While AI can transform data-driven operations, organizations must approach its adoption cautiously, ensuring thorough evaluations and maintaining human oversight to mitigate risks and adapt workflows. Best practices for implementing AI include starting with low-risk areas, making incremental investments, and gradually increasing AI usage as trust and reliability are established. Balancing innovation with security, AI-driven platforms like Tines offer automation while emphasizing the importance of human input to prevent burnout and retain talent. Building trust in AI systems by setting clear objectives, enhancing transparency, and implementing oversight mechanisms is crucial for organizations to avoid falling behind in technological advancement.

Aaron Jewitt, Principal Detection Engineer at Elastic, outlines a Tines workflow designed to enhance his team's automated alert triage processes by utilizing records to improve performance. In a guest blog post, he explains how his InfoSec team employs Tines to efficiently manage alert triage by tracking automated triage results and caching values for longer durations to improve system efficiency. The workflow, referred to as a story in Tines, involves checking various Elasticsearch index patterns for the source.ip field, with checks based on rule tags. By using a record containing a source.ip text field and a boolean field labeled is_managed, the team can ascertain if the source.ip is from a managed system and thus reduce unnecessary queries, thereby easing the load on their tenant and Elasticsearch clusters. The process includes creating new records for source.ips, marking them as managed or not, and subsequently routing alerts through distinct paths for further checks. If a source.ip hasn't been marked as managed, an alert is sent to Slack, and if found, it's directed to a Send to Story action, which deduplicates, updates, and tags alerts in Elastic SIEM. This innovative workflow is available for free exploration through the Tines Community Edition and a 14-day trial of Elastic Cloud.

The conversation between Eoin Hinchy of Tines and Patrick Gray on the Risky Biz podcast explores how Tines is integrating AI, especially large language models (LLMs), into security automation workflows to enhance their functionality and scalability. Tines, known for its adept security automation, is focusing on making workflows easier to build and monitor through AI, allowing users to describe and iterate workflows using natural language. The discussion highlights the importance of creating deployable AI solutions that solve real customer problems and run at scale, contrasting with less effective demo-level AI implementations. Tines aims to give customers secure and private access to AI models, allowing them to choose models suited for specific tasks while emphasizing the need for scalable, elastic, and well-monitored workflows. The potential for AI to handle repetitive tasks is discussed, along with Tines' strategy to lead in workflow automation by utilizing its vast data and experience. The podcast also touches on the shift from merely inserting AI into products to thoughtfully integrating it to transform business processes significantly.

Udemy's security team is leveraging AI in Tines to enhance workflow automation and maintain data security without compromising privacy, as the platform ensures data remains local and is not used for training. The inclusion of AI features like automatic mode and AI action have proven beneficial, allowing the team to efficiently manage event and alert responses by standardizing log data and customizing email alerts, ultimately saving significant time and resources. Senior Security Engineer Kyle McGaley appreciates the seamless integration of AI capabilities, such as simplifying complex tasks, which were previously done using other language models, thereby eliminating the need for additional subscriptions. The team is excited about the potential of AI to streamline security responses and sees great promise in expanding its use to new areas, such as Slackbots and incident response systems, demonstrating the transformative impact of AI on their operations.

AI is being integrated into Tines to enhance efficiency and security, with two key features that make the platform more accessible: Automatic mode in Event Transform and AI Action. These features are designed to allow users to manage data transformations and incorporate large language models (LLMs) into their workflows without writing code, while maintaining privacy and security by avoiding public networking, training, storage, and logging. Automatic mode simplifies complex data tasks like normalizing date formats and converting file formats, while the AI Action enables secure LLM integration for tasks such as reviewing documents for sensitive information and summarizing workflow data. Tines offers these AI-powered features across all cloud plans, including the free Community Edition, emphasizing their commitment to making AI accessible to all users.

Tines, a workflow automation platform, is integrating AI into its services to enhance efficiency and user experience, marking a significant shift in its approach to solving customer problems. Initially skeptical of AI's potential, the company's founder realized its value after witnessing how AI could simplify complex tasks, like converting time formats. After numerous trials, Tines successfully embedded AI features into its platform, available to all users, including those on the Community Edition, ensuring data security by running models within its infrastructure. The new AI capabilities aim to streamline workflows, reduce analyst fatigue, and improve job satisfaction by automating mundane tasks and facilitating decision-making. The platform's automatic mode allows users to build workflows with natural language commands, catering to both developers and non-developers, thereby lowering the barrier to entry and increasing engagement. The introduction of AI has been met with positive feedback from early access participants, who have experienced improved workflow efficiency and new use cases. Tines remains committed to maintaining customer trust and security while exploring broader AI applications, aiming to continue transforming business operations with innovative technology.

MyFitnessPal's collaboration with Tines has led to the innovative use of AI to streamline workflows and boost efficiency for their IT and security teams. By participating in Tines' Early Access Program for AI, MyFitnessPal staff engineer Tyler Talaga quickly developed AI-powered workflows that significantly reduced the time required for tasks such as generating interactive Slack content, auditing workflows, and dynamically creating XML payloads for Jamf Pro API. The AI capabilities also assist in summarizing change control requests, thereby saving the team from manually reviewing extensive JSON data. This integration of AI, praised by both Talaga and MyFitnessPal's Senior Director of Security and IT, Allen Cox, has allowed the team to offload repetitive tasks and explore new use cases, lowering the barrier to entry for non-developers and enhancing overall productivity.