Identity activity
“Which privileged identities signed in from new locations?” Connect authentication behavior to privileges and related events.
Ask a question.
Follow the evidence.
Enterprise search, focused on security. Explore the telemetry and investigation context available to your team using natural-language questions.
GuardNex CopilotFind the context
Find the context
behind the question.
Move from a user, indicator, or incident to the evidence that helps explain it. Search is grounded in connected security data and the scope available to the investigation.
- Investigate identities, assets, and related events
- Explore historical sightings and incident context
- Turn findings into analyst-ready summaries
The interactive examples show fixed sample answers. They do not query a live customer environment.
GNX // Security searchIllustrative examples
Why is this identity high risk?
Three related signals need review.
The sample identity signed in from an unfamiliar location, created an access key, and changed a sensitive resource policy. Privilege level and the sequence of activity increase the investigation priority.
Authentication eventKey creationPolicy change
Credentials and resource access changed.
In this sample timeline, a new access key was followed by a policy modification. Review the key’s permissions, identify the affected resource, and validate whether the changes were expected.
Cloud audit timelineAffected resource
A privileged identity requires investigation.
Related sign-in and cloud activity may indicate credential compromise. Scope is under review. Recommended next steps are owner validation, credential review, and analyst-approved containment if warranted.
Sample executive summaryHuman review required
Search with a purposeThe next question
The next question
moves the investigation.
Indicator history
“Has this IP appeared in previous incidents?” Use available sightings and threat context to guide the next step.
Incident explanation
“What should I investigate next?” Review the evidence, uncertainty, and recommended follow-up before acting.
Your next movePut intelligence at the
Book a meetingPut intelligence at the
center of your SOC.
Bring your security stack. We’ll explore how GuardNex AI can support the way your team detects, investigates, and responds.