Learn
active
kodeblue: AI-triaged SOC/IR agent for Linux servers (OSS)
- Engineer — Learn: Interesting open-source agent that couples host-learning sensors with an on-device small model for containment; worth evaluating for Linux fleet coverage, but no patch or config change required today.
- SOC/IR — Learn: New OSS IR agent with zero-token sensors and automated containment under a root policy is worth a lab evaluation to see if it complements existing EDR coverage on Linux servers.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.