Summarize a Case using generative AI

---
title: Summarize a Case using generative AI
description: Use to generate a concise summary of a case, including its key findings and recommended next steps.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/threat-intelligence-security-center/now-assist-tisc-case-summarization.html
release: australia
product: Threat Intelligence Security Center
classification: threat-intelligence-security-center
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 3
keywords: [Case summarization, AI case summary, Threat case analysis, Now Assist summarization, Generative AI summaries, Case overview, Threat case highlights]
breadcrumb: [Threat Analyst Workbench, Use, Threat Intelligence Security Center, Security Operations]
---

# Summarize a Case using generative AI

Use to generate a concise summary of a case, including its key findings and recommended next steps.

## Before you begin

**Important:** Some generative AI skills, AI agents, and agentic workflows are turned on by default. For more information, see [AI agents, skills, and agentic workflows on by default](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/intelligent-experiences/now-assist-skills-on-by-default.md).

Role required: sn\_sec\_tisc.analyst

## About this task

The TISC Case Summarization skill analyzes the content of a threat case — including linked threat intelligence objects, notes, and activity history — and generates a concise summary. Analysts can review the summary and quickly understand the current state of the case.

## Procedure

1.  Navigate to **Workspaces** > **Threat Intelligence Security Center**.

2.  Select the **Threat Analyst Workbench** icon.

3.  In **Case Management**, open the case you want to summarize.

    You can use case summarization for all case statuses, except Draft and Cancelled.

4.  In the **Details** tab, select **Summarize**.

    You can also use the **Summarize Case** option from the Now Assist panel.

    Depending on the available data, the summary includes one or more of the following sections surfacing the prioritized details:

    -   Case overview: Available for all summaries. Contains a brief overview and case details.
    -   Findings: Contain details, such as, Key insights, Top risk indicators, Assets and Services.
    -   Key actions taken: Lists the actions performed by analysts on the case.
    -   Recommended next steps: Lists the possible case mitigation, subsequent procedures, or other next steps.
5.  Select **Share** to open the summary in an editable window and add or remove summary details, and select **Save to work notes**.


**Parent Topic:**[Threat Analyst Workbench](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/threat-analyst-workbench.md)

**Related topics**  


[Workbench Overview]()

[Creating cases using Threat Analyst Workbench]()

[Creating case task using Threat Analyst Workbench]()

[Working with Investigation Canvas]()

[Add artifacts to cases or case tasks]()

[Run Enrichment Actions within a case]()

[Generate a Case Report using generative AI]()

[Generate a Case Report using a template]()

[Create a security incident from a TISC case]()

[Upload Secure File Attachments]()

[Using playbooks]()