Summary

The platform maps indicators and adversary techniques to detection logic for systems including CrowdStrike, Wiz, Splunk, cloud telemetry and data lakes. Each rule is tested against up to 30 days of customer data before deployment, and the company says it also monitors AI coding-agent credential leakage.

Why it matters

Automating the path from threat report to tested detection could shorten a defensive cycle that often trails attackers by days or weeks.

Sources