Cybersecurity Defense Tools
Description
Addresses manual process of detecting unknown cybersecurity threats.
Detailed example
Recommendations related to potential IT security threats.
AI / analytics pattern
Classical/Predictive Machine Learning: Models trained on data to make predictions or classifications based on identified patterns or relationships.
Automation level / stage
c) Deployed – The use case is being actively authorized or utilized to support the functions or mission of an agency.
Expected benefit
Certain tools are used Department-wide to provide endpoint detection; threat intelligence, analysis, and response; and related services. These tools help the Department more quickly identify and respond to threats and indicators of compromise from systems.
Audit / financial statement impact
Does not produce an output that serves as a principal basis for decisions or actions with legal, material, binding, or significant effect on any of the individuals or entities identified in OMB-25-21.
Controls / human review
ATO: Yes; PIA: Not published
Data needed
The case owner relied on DOJ AI governance practices to select and prepare data, as well as evaluate performance.