6 cases
Active cases
5
SourcesTicketing / SOAR
Awaiting decision
4
SourcesTicketing / SOAR
Highest risk
66
SourcesCMDBThreat Intel
Evidence items
29
SourcesSIEMEDR / XDRIAM
Cases
Each case opens the agent's transparent pipeline: ATT&CK → evidence → explainable risk → response