Security AI: rule and memory resolution before any LLM call
A built-in engine resolves known patterns from rules and previously confirmed analyses first, so repeat alerts do not need a model call.
Status
Available
Implemented and covered by automated tests.
Good to know
By default only high and critical alerts go through rule matching. Sigma-based resolution is off by default.
See it on your own alerts.
Book a walkthrough with the team. We will show the platform end to end, tell you what is production-ready and what is not, and discuss how it would sit next to your existing SIEM.