A Chrome extension from Dropzone AI

COACH mentors SOC analysts through real alerts

Open an alert in your SIEM or EDR and click Generate Guidance. COACH summarizes what fired, lays out a benign and a malicious explanation, and suggests what to check next. No cost to install. Available from the Chrome Web Store, and it works in Chromium browsers such as Microsoft Edge.

Periwinkle signal strokes converge toward one illuminated signal on a deep navy field.

A Chrome extension from Dropzone AI

COACH mentors SOC analysts through real alerts

Open an alert in your SIEM or EDR and click Generate Guidance. COACH summarizes what fired, lays out a benign and a malicious explanation, and suggests what to check next. No cost to install. Available from the Chrome Web Store, and it works in Chromium browsers such as Microsoft Edge.

Periwinkle signal strokes converge toward one illuminated signal on a deep navy field.

A Chrome extension from Dropzone AI

COACH mentors SOC analysts through real alerts

Open an alert in your SIEM or EDR and click Generate Guidance. COACH summarizes what fired, lays out a benign and a malicious explanation, and suggests what to check next. No cost to install. Available from the Chrome Web Store, and it works in Chromium browsers such as Microsoft Edge.

Periwinkle signal strokes converge toward one illuminated signal on a deep navy field.

A Chrome extension from Dropzone AI

COACH mentors SOC analysts through real alerts

Open an alert in your SIEM or EDR and click Generate Guidance. COACH summarizes what fired, lays out a benign and a malicious explanation, and suggests what to check next. No cost to install. Available from the Chrome Web Store, and it works in Chromium browsers such as Microsoft Edge.

Periwinkle signal strokes converge toward one illuminated signal on a deep navy field.
New analysts see fewer alerts end to end

Tier 1 alert work, the first review of each alert, used to be where analysts learned the job. As AI agents take on more of it, new analysts see fewer alerts from start to finish, and senior analysts have little time to mentor.

Dropzone AI builds some of those agents, so we built COACH to help close the gap.

New analysts see fewer alerts end to end

Tier 1 alert work, the first review of each alert, used to be where analysts learned the job. As AI agents take on more of it, new analysts see fewer alerts from start to finish, and senior analysts have little time to mentor.

Dropzone AI builds some of those agents, so we built COACH to help close the gap.

New analysts see fewer alerts end to end

Tier 1 alert work, the first review of each alert, used to be where analysts learned the job. As AI agents take on more of it, new analysts see fewer alerts from start to finish, and senior analysts have little time to mentor.

Dropzone AI builds some of those agents, so we built COACH to help close the gap.

New analysts see fewer alerts end to end

Tier 1 alert work, the first review of each alert, used to be where analysts learned the job. As AI agents take on more of it, new analysts see fewer alerts from start to finish, and senior analysts have little time to mentor.

Dropzone AI builds some of those agents, so we built COACH to help close the gap.

What COACH gives you

what fired

A summary of the alert type and what the detection is trying to catch.

Two possible explanations

A summary of the alert type and what the detection is trying to catch.

What to check next

Specific investigation steps for testing each explanation.

Further reading

Articles from the web on the topics behind the alert, if you want to go deeper.

What COACH gives you

what fired

A summary of the alert type and what the detection is trying to catch.

Two possible explanations

A summary of the alert type and what the detection is trying to catch.

What to check next

Specific investigation steps for testing each explanation.

Further reading

Articles from the web on the topics behind the alert, if you want to go deeper.

What COACH gives you

what fired

A summary of the alert type and what the detection is trying to catch.

Two possible explanations

A summary of the alert type and what the detection is trying to catch.

What to check next

Specific investigation steps for testing each explanation.

Further reading

Articles from the web on the topics behind the alert, if you want to go deeper.

What COACH gives you

what fired

A summary of the alert type and what the detection is trying to catch.

Two possible explanations

A summary of the alert type and what the detection is trying to catch.

What to check next

Specific investigation steps for testing each explanation.

Further reading

Articles from the web on the topics behind the alert, if you want to go deeper.

How COACH works

Open the alert

Go to the alert in the security tool you already use, such as your SIEM or EDR.

Click generate guidance

COACH analyzes the page you have open and builds guidance for that alert.

Work through the guidance

Read the summary and the two possible explanations. Then follow the investigation steps, and check the guidance against your own procedures.

How COACH works

Open the alert

Go to the alert in the security tool you already use, such as your SIEM or EDR.

Click generate guidance

COACH analyzes the page you have open and builds guidance for that alert.

Work through the guidance

Read the summary and the two possible explanations. Then follow the investigation steps, and check the guidance against your own procedures.

How COACH works

Open the alert

Go to the alert in the security tool you already use, such as your SIEM or EDR.

Click generate guidance

COACH analyzes the page you have open and builds guidance for that alert.

Work through the guidance

Read the summary and the two possible explanations. Then follow the investigation steps, and check the guidance against your own procedures.

Who COACH is for

For analysts

Learn on the real alerts in front of you. Get guidance at any hour, on any shift. Get ideas on an alert type you have not seen before.

For SOC leads

Give new hires a structured way to start each alert. Supplement senior analysts' mentoring with practice on real alerts. See how Dropzone AI approaches alert investigation.

Who COACH is for

For analysts

Learn on the real alerts in front of you. Get guidance at any hour, on any shift. Get ideas on an alert type you have not seen before.

For SOC leads

Give new hires a structured way to start each alert. Supplement senior analysts' mentoring with practice on real alerts. See how Dropzone AI approaches alert investigation.

Who COACH is for

For analysts

Learn on the real alerts in front of you. Get guidance at any hour, on any shift. Get ideas on an alert type you have not seen before.

For SOC leads

Give new hires a structured way to start each alert. Supplement senior analysts' mentoring with practice on real alerts. See how Dropzone AI approaches alert investigation.

Who COACH is for

For analysts

Learn on the real alerts in front of you. Get guidance at any hour, on any shift. Get ideas on an alert type you have not seen before.

For SOC leads

Give new hires a structured way to start each alert. Supplement senior analysts' mentoring with practice on real alerts. See how Dropzone AI approaches alert investigation.

What happens to your alert data?

When you click Generate Guidance, COACH sends the page content to Dropzone AI and to an AI model provider such as OpenAI to produce the guidance. Per the COACH privacy notice, neither trains on nor retains that content, and the extension does not retain the alert or the guidance. Dropzone AI does collect the alert type, time, IP address and geolocation. Share the notice with your security team before you install.

What happens to your alert data?

When you click Generate Guidance, COACH sends the page content to Dropzone AI and to an AI model provider such as OpenAI to produce the guidance. Per the COACH privacy notice, neither trains on nor retains that content, and the extension does not retain the alert or the guidance. Dropzone AI does collect the alert type, time, IP address and geolocation. Share the notice with your security team before you install.

What happens to your alert data?

When you click Generate Guidance, COACH sends the page content to Dropzone AI and to an AI model provider such as OpenAI to produce the guidance. Per the COACH privacy notice, neither trains on nor retains that content, and the extension does not retain the alert or the guidance. Dropzone AI does collect the alert type, time, IP address and geolocation. Share the notice with your security team before you install.

What happens to your alert data?

When you click Generate Guidance, COACH sends the page content to Dropzone AI and to an AI model provider such as OpenAI to produce the guidance. Per the COACH privacy notice, neither trains on nor retains that content, and the extension does not retain the alert or the guidance. Dropzone AI does collect the alert type, time, IP address and geolocation. Share the notice with your security team before you install.

Where it works

COACH works on the alert page open in your browser tab, in the console your team already uses. Examples: AWS GuardDuty, CrowdStrike EDR Alert types: Endpoint, cloud, identity, network, phishing

Where it works

COACH works on the alert page open in your browser tab, in the console your team already uses. Examples: AWS GuardDuty, CrowdStrike EDR Alert types: Endpoint, cloud, identity, network, phishing

Where it works

COACH works on the alert page open in your browser tab, in the console your team already uses. Examples: AWS GuardDuty, CrowdStrike EDR Alert types: Endpoint, cloud, identity, network, phishing

Where it works

COACH works on the alert page open in your browser tab, in the console your team already uses. Examples: AWS GuardDuty, CrowdStrike EDR Alert types: Endpoint, cloud, identity, network, phishing

Frequently Asked Questions

[

01

]

What is COACH?

[

02

]

Does COACH cost anything?

[

03

]

What happens to my alert data?

[

04

]

Which browsers and consoles does it work with?

[

05

]

Can COACH be wrong?

[

06

]

How is COACH related to the Dropzone AI platform?

Frequently Asked Questions

[

01

]

What is COACH?

[

02

]

Does COACH cost anything?

[

03

]

What happens to my alert data?

[

04

]

Which browsers and consoles does it work with?

[

05

]

Can COACH be wrong?

[

06

]

How is COACH related to the Dropzone AI platform?

Frequently Asked Questions

[

01

]

What is COACH?

[

02

]

Does COACH cost anything?

[

03

]

What happens to my alert data?

[

04

]

Which browsers and consoles does it work with?

[

05

]

Can COACH be wrong?

[

06

]

How is COACH related to the Dropzone AI platform?

Frequently Asked Questions

[

01

]

What is COACH?

[

02

]

Does COACH cost anything?

[

03

]

What happens to my alert data?

[

04

]

Which browsers and consoles does it work with?

[

05

]

Can COACH be wrong?

[

06

]

How is COACH related to the Dropzone AI platform?

Glowing violet geometric panels on a dark call-to-action background

Start with the next alert you open

No cost to install. Available from the Chrome Web Store.

Glowing violet geometric panels on a dark call-to-action background

Start with the next alert you open

No cost to install. Available from the Chrome Web Store.

Glowing violet geometric panels on a dark call-to-action background

Start with the next alert you open

No cost to install. Available from the Chrome Web Store.

Glowing violet geometric panels on a dark call-to-action background

Start with the next alert you open

No cost to install. Available from the Chrome Web Store.