Learn how to use the KYRA MDR console
KYRA AI is your intelligent security analyst. Ask questions about alerts, get investigation recommendations, or analyze threats in real-time.
KYRA MDR is a managed detection and response platform that provides real-time threat monitoring, incident management, and security analytics for your organization.
Detection & Response
Automated threat detection with customizable rules, MITRE ATT&CK mapping, and playbook-driven response workflows.
Incident Management
Full lifecycle incident tracking with severity classification, assignment, timeline views, and investigation graphs.
Log Search & Analytics
Powerful log search across all connected data sources with filtering, aggregation, and export capabilities.
Compliance & Reporting
Compliance dashboards, risk intelligence, automated reports, and audit logging for regulatory requirements.
Threat Intelligence
Integrated threat intelligence feeds, IOC matching, and risk scoring to prioritize the most critical threats.
Asset Management
Inventory and monitor all assets, identities, and network endpoints connected to your environment.
Press ? anywhere to open the shortcuts dialog. Available shortcuts:
| Shortcut | Action |
|---|---|
| ? | Open keyboard shortcuts help |
| g then d | Go to Dashboard |
| g then a | Go to Detections |
| g then i | Go to Incidents |
| g then s | Go to Settings |
| g then l | Go to Log Search |
| g then k | Toggle KYRA AI panel |
| Escape | Close any open dialog or panel |
How are detections generated?
Detections are generated by matching incoming log data against your configured detection rules. Rules can be based on signatures, anomalies, or threat intelligence indicators.
What is the difference between a detection and an incident?
A detection is a single alert triggered by a rule. An incident is a group of related detections that represent a broader security event requiring investigation and response.
How do I connect a new data source?
Navigate to Connectors in the sidebar, click "Add Connector", and follow the setup wizard for your data source type. Supported sources include cloud providers, endpoints, network devices, and more.
Can I customize notification settings?
Yes. Go to Settings to configure notification preferences including email alerts, severity thresholds, and escalation policies.