feat: add example question for DNS requests to known malicious domain
taylorwalton committed
Jul 24, 2025 at 11:00 UTC
79e400906f53c3511353fc2b55cdfe2b6628d667
1 file changed
+5
backend/app/integrations/copilot_mcp/services/example_questions.py
+5
@@ -86,6 +86,11 @@ class ExampleQuestionsService:
86
description="Get the count of new documents added to the index",
87
category="indexing",
88
),
89
+ ExampleQuestion(
90
+ question="Has the agent named `agent_name` made any dns requests to `evil.com` within the index pattern `wazuh-customerA*`?",
91
+ description="Search for DNS requests made by a specific agent to a known malicious domain",
92
+ category="search",
93
+ ),
94
ExampleQuestion(
95
question="How much diskspace is the `wazuh-customerA*` indices consuming?",
96
description="Get the disk space usage for all indices related to customerA",