GreyCortex-investigation

To automate a GreyCortex Mendel security assessment, run a read-only evaluation that aggregates incidents, detection events, OT findings, and threat intelligence into a single timestamped markdown report. This requires Mendel MCP connectivity and viewer access.

Threat investigation across multiple Mendel sensors is handled by spawning parallel analyses for each discovered sensor, examining notable events, subnet context, and unknown-host enrichment to provide per-sensor triage and prioritized findings.

Yes, you can review OT security findings and threat intelligence in one report. The assessment aggregates OT-specific activity, threat intelligence hits, and high-severity detection events across the connected CEM deployment into an actionable markdown file.

Yes, Jina AI OUI enrichment is required to resolve unknown MAC-addressed hosts during a Mendel security assessment. This enrichment provides necessary context for per-sensor triage and comprehensive threat investigations.

Performing a read-only security posture review involves summarizing open incidents, high-severity detection events, and threat intelligence hits across the Mendel environment, producing a timestamped markdown assessment with concrete security recommendations.

No, the Mendel security assessment is strictly read-only. It aggregates scattered CEM and sensor data to generate an actionable investigation report without modifying any existing deployment configurations or active sensor settings.