The Agents page has a tile for every AI agent currently available on the Red Canary platform, sorted alphabetically. Each tile summarizes the Agent’s job and the tasks it performs, as well as showing the number of times the Agent has executed - both in the current environment and globally.
Note that if you’re not licensed for a particular product, the Agent tile is greyed out.
Viewing Agent Details
You can view additional execution details for an individual Agent by clicking on the name.
The slide-out panel displays the following details about the Agent:
Job Description
An explanation of the Agent’s primary purpose.
Standard Operating Procedure
The full list of individual tasks the Agent performs when it runs.
Attributes
The Agent category (Investigation, Response, Email Security, User Behavioral Analysis), version number, and last modified date.
Total Executions
The number of times the Agent has run in this environment and globally across the entire Red Canary system, starting in March 2026.
Recent Executions
The date and time in UTC for the last five times the Agent ran in the current environment. Where available, the Summary includes a link to the issue the Agent was responding to (for example, an event or threat).