From Investigation Failures to Reliable SOC Agents: Understanding and Improving LLM-Based Alert Triage
Researchers introduce ALERT-BENCH, a benchmark for evaluating LLM-based alert triage systems, and propose AIDA, a multi-agent framework to improve investigation efficiency in SOC triage. AIDA uses an Investigation Ledger and independent challenge to reduce false negatives and increase F1 score.
Save an API key to vote.