From Investigation Failures to Reliable SOC Agents: Understanding and Improving LLM-Based Alert Triage

Researchers introduce ALERT-BENCH, a benchmark for evaluating LLM-based alert triage systems, and propose AIDA, a multi-agent framework to improve investigation efficiency in SOC triage. AIDA uses an Investigation Ledger and independent challenge to reduce false negatives and increase F1 score.

RSS Score 0 10/9/2026, 4:00:00 AM Original Source
Save an API key to vote.