Crogl is an autonomous AI team member designed for Security Operations Centers (SOCs). It functions as a fully automated solution that triages and investigates every alert, performs threat hunting, and operates without the need for code or pre-written playbooks. Crogl can be deployed on-premises or in cloud environments, adopting an 'assume breach' mindset for threat investigation. It monitors alerts across various systems including SIEM, ticketing systems, internet sources, threat intelligence platforms, and documents. Crogl automatically generates response plans for threats and analyzes all required data regardless of location, programming language, data schema, or API. It continuously learns and adapts to an organization's processes, updating its knowledge as changes occur. Crogl incorporates MITRE ATT&CK® concepts in its investigations and conducts full-scale threat hunts based on documents and advisories.
