This is actually pretty cool. One because I have build a Ai Soc team that basically investigates all incidents and we have been able to quiet the noise with AI. But this makes me feel good that I am on the right path here. I have build a whole SOC team with agents. Every tool we use is integrated but we also have guardrails any writes or actions require a human. I have build learning and memory to this system. I’m blown away that I am on the right path with this system and how far it’s going. Def will now ask my company for a local model for when we get a true incident we can feed it to a local model instead of a frontier model like suggested.