AI-Assisted Cyber Threat Detection Query Generation

This system uses generative AI tools — including Anthropic Claude and Microsoft Copilot — to help cybersecurity analysts at Innovation, Science and Economic Development Canada write advanced queries for detecting threats in security logs. Analysts provide prompts; the AI generates Kusto Query Language queries that are then run against internal audit and security event data. The system processes no personal information, and its use of AI is disclosed to Government of Canada employees who interact with it.