Generative artificial intelligence (AI)-based remediation script generation and customization

A method for remediating an incident on a computer system, the method comprising:

• storing a plurality of incident response scripts in a script library;
• executing a script description generative artificial intelligence (AI) model to generate at least one description for each incident response script of the plurality of incident response scripts as a plurality of descriptions;
• executing an embeddings generative AI model to generate a plurality of vectors for each description of the plurality of descriptions;
• storing the plurality of incident response scripts, the plurality of descriptions, and the plurality of vectors in a vector store;
• receiving a request for a remediation script, wherein the request includes a description of a script purpose;
• generating a request vector from the script purpose;
• performing a similarity search in the vector store based on the request vector and matching a most suitable script from the plurality of incident response scripts based on a similarity measure;
• executing a tailoring generative AI model to tailor the most suitable script according to the script purpose to generate a tailored remediation script by modifying at least one line in the most suitable script for execution according to the script purpose;
• and
• executing the tailored remediation script to remediate the incident on the computer system.

A system for remediating an incident on a computer system, the system comprising:

• a plurality of cloud-based generative artificial intelligence (AI) models trained on a library of remediation scripts, wherein the plurality of cloud-based generative AI models include:
• a first model configured to generate a plurality of descriptions including a description for each remediation script in the library of remediation scripts,
• a second model configured to generate a plurality of embeddings for the plurality of descriptions including an embedding representation of each description of the plurality of descriptions, and
• a third model configured to modify a remediation script of the plurality of remediation scripts based on a script request;
• a vector store configured to store the plurality of remediation scripts, the plurality of descriptions, and the plurality of embeddings;
• and
• a backend server including a processor and an operable coupled memory and configured to:
• execute the first model to generate the plurality of descriptions,
• perform a similarity search in the vector store based on the script request and match a most suitable script using a cosine similarity comparison of angles between the plurality of embeddings and a request embedding of the script request,
• execute the second model to generate the request embedding of the script request,
• execute the third model to modify the most suitable script to generate a tailored remediation script by modifying at least one line in the most suitable script for execution according to the script request, and
• provide the tailored remediation script to the computer system for remediation of the incident,
• wherein the tailored remediation script is executed to remediate the incident on the computer system.