- Engineer — Skip
- SOC/IR — Learn: SherAgent demonstrates a 31–64% improvement in automated attack investigation success rates using LLM-driven provenance graph backtracking — useful context for teams evaluating or building AI-assisted triage workflows, though no production tool or IOCs are released here.
- Leader — Learn: Research from a real SOC environment shows LLM-assisted alert triage meaningfully reduces the manual investigation backlog; relevant background for leaders assessing AI tooling investments in detection and response.