DTACT Documentation

website·Indexed 33 days ago

https://docs.dtact.com

A comprehensive data platform available on-prem and in the cloud, combining data integration, BI solutions, and security operations. Key modules include Fusion, a cloud-based data lakehouse for unified querying and data management; Insights, an operational intelligence hub for visualizations, alerting, and case management; and Action, which provides automation via visual workflow builders called Playbooks. The platform also features an AI Assistant using LLMs, a Query Analyzer for SQL exploration, and modular code components known as Bricks.

Tokens
11.1K
Snippets
22
Records
122
Agent score
50%

What's inside DTACT

  1. Overview of DTACT Bricks

    Bricks are the fundamental building blocks of DTACT. They serve as modular, reusable code components designed to extend the platform's capabilities in areas such as data integration, transformation, visualization, and automation.
  2. Overview of the DTACT Data Platform

    DTACT is a comprehensive data platform available for both on-premises and cloud deployments. It provides a unified solution that integrates data integration, Business Intelligence (BI) solutions, security monitoring, and AI-powered analysis.
  3. Overview of dtact Dashboards

    Dashboards in dtact are comprehensive visual displays used for monitoring, reporting, and team collaboration. They allow users to combine various elements, including panes, text, images, and filters, into a single view.
  4. Overview of DTACT Bricks

    Bricks are modular, reusable Python code components that extend DTACT's capabilities. They are used for data integration, transformation, visualization, and automation. Common functions include fetching data from external APIs, enriching data, powering detections/playbooks, and adding user-defined functions to the query engine or assistant.
  5. Overview of User Defined Functions (UDFs) in dtact

    User Defined Functions (UDFs) allow developers to extend standard SQL capabilities by calling customized Python functions directly from the Query Analyzer. This enables the blending of Python's flexibility with SQL queries to meet specific business logic requirements.
  6. Overview of Action Playbooks for automation

    Action Playbooks are visual workflow builders used to create automated response workflows without writing code. Users can build these workflows by dragging and dropping 'Bricks' onto a canvas and connecting them together. Playbooks are designed to automate specific actions triggered by events.
  7. Overview of the DTACT AI Assistant

    The DTACT AI Assistant is an integrated tool powered by Large Language Models (LLMs) designed to operate within the DTACT environment. It has full access to team data and context, allowing it to perform security-specific tasks such as analyzing security events and alerts, querying and exploring data, generating reports and documentation, and automating investigation workflows.
  8. Overview of DTACT Data Connectors

    Data Connectors serve as the integration points used to ingest external data into a Fusion datalake. DTACT provides multiple connection types to support various data architectures and specific business use cases.
  9. Overview of the DTACT AI Assistant

    The DTACT AI Assistant is an integrated tool powered by Large Language Models (LLMs) designed to assist security teams within the DTACT environment. It has full access to team data and context, allowing it to analyze security events and alerts, query and explore data, generate reports and documentation, and automate investigation workflows.
  10. Overview of DTACT Insights

    Insights serves as the operational intelligence hub within DTACT. It integrates visualization, alerting, and case management tools, allowing users to monitor, investigate, and respond to security events from a centralized interface.
  11. Overview of the Fusion Query Analyzer

    The Query Analyzer is the primary interface in Fusion for exploring and analyzing data across all connected sources. It utilizes a SQL interface that supports PostgreSQL-compatible syntax, including additional extensions designed for advanced analytics, allowing users to query data from any connected schema.
  12. Overview of dtact Dashboards

    Dashboards in dtact are comprehensive visual displays used for monitoring, reporting, and team collaboration. They allow users to combine various elements, including panes, text, images, and filters, into a single view.