Google Threat Intelligence moves agentic AI to GA, claiming 30-minute alert triage compressed to ~60 seconds across 5M alerts

Pulse 2.0·medium signal

Google moved the agentic capabilities in Google Threat Intelligence from public preview to general availability for Enterprise and Enterprise+ customers, covering threat hunting, incident response, and daily alert triage via natural-language queries over IOCs, files, domains, and CVEs. The release includes a Prompt Library of predefined investigative workflows and a Malware Analysis Agent that auto-activates for deeper inspection inside a cloud sandbox. Google reports processing over 5 million alerts in the past year, turning what was a 30-minute manual analysis into roughly 60 seconds — one of the few agent deployments publishing a concrete before/after on analyst time.