AI SOC includes the following applications. You can find them in 

 after install. Each application defines a data model and record layout that organizes how you view and work with records. For 

 on components and orchestration (including 

 (CASE): Primary application for triage and investigation with Hero AI. Ingestion creates records here (tracking prefix 

), signal and case fields, evidence areas, and the 

 tracking fields, and manual actions. Timelines, audit, and routing rule results live on additional tabs. See 

 (TIA): Application for storing observable enrichment results (package name 

 panel that anchors key fields, plus enrichment results and risk scores.

 (RULE): Application for defining routing logic that maps records to playbooks (package name 

). Records use a tabbed layout for Rule data and configuration. For compatible playbooks and manual association, see 

KB Article Best Practices for Plan Generation

 (AI): Application for building and tracking alert ingestion configurations (separate 

). Each record represents an ingestion setup (for example, vendor product, API specification uploaded, components generated). The custom widget guides you through creating connector components and ingestion pipelines; use the 

 tab to review configurations and activity. For the full workflow, see 

These walkthroughs explain where to start in each application, which panels to prioritize when viewing records, and the actions to use for triage and investigation.

Getting Started

AI SOC Applications

test12

sdfdssdfsdfsdfsdfdsfsdf

edfsad

dsfsdfsdf

test

specific

var_miha

new_var_2

new_mih_var

mih_var

testheight

available

testulet

testvar

This is a plain text that will be inserted in an expandable heading for using this raw as an exampl

altscenario

This is a plain text that will be inserted in an expandable heading for using this raw as an example

scenario

exemplu

variabila

Archbee

text

refresh_token

YourBank

MyBank

variable_test_video

variable123

silviu

Bogdan_test

ferwhethgte

target1

google

support

product_name

productName1

companyLegalName

programName

customerName1

productName

Product_Name

Test

SEFAS

uptempo

customerName

testName

name1

customername

apilink1-getallmethod

variable_one

capitalize

company_name_adobe

jama_2

jama_1

domain

email

product

Glossary lets you define every tricky term, then gives them a sneak peek explanation on hover... Just like I'm doing with this text right here!

Glossary_feature

Google

aaaa

insitutionAdress

dasdas666

aa112

asdasdas

asdasd

What

New_reusable

test_var2

test_var

Case Management (CASE)

Our knowledgeable support team and an awesome community will get you an answer in a flash.

Swimlane Solutions and Applications

Architecture and Data Flow

Installing and Configuring AI SOC Solution

RBAC Considerations for AI SOC

AI SOC Ingestion

Operations and Guidance

Dashboards and Reports

Example Scenarios

Integration Examples

Operational Best Practices

Troubleshooting

AI SOC Solution

Installing SOC Solutions Bundle

SOC - Alert Ingestion (Webhook) - Template Playbook Overview

SOC - Alert Ingestion (Cron) - Template Playbook Overview

SOC - Bulk Ingest Phishing Emails - Template Playbook Overview

Configure Threat Intelligence Enrichment Integration

Configure Custom Case and Incident Management Data Mappings

Swimlane AI Agents Case Management Extension

SOC Solutions Bundle

Installing and Configuring

Business Continuity Management Workflows

Using Business Continuity Management

Dashboards in BCM

References

Business Continuity Management (BCM) Solution

How it Works?

Creating or Updating the SCF Records

SCF Data Import Application Overview

SCF Findings Application Overview

SCF Library Application Overview

SCF Evidence Application Overview

SCF Remediation Plans Application Overview

SCF Reporting Application Overview

Compliance Audit Readiness (CAR) Solution

Installing and Configuring Collaboration Extension

Configure Webhooks

Configure Collaboration Extension Template

Select a Template and Send a Message

Collaboration Extension

Installing and Configuring Crafted AI Prompts

Crafted AI Prompts

Installing Detection Engineering Extension

Configuring Detection Engineering Extension

Detection Engineering Extension - How it Works

Detection Engineering Extension

Vulnerability Response Management Workflows

VRM Applications and Dashboards

VRM Playbooks and Components

Using Vulnerability Response Management

Using VRM for MSSPs

Vulnerability Response Management (VRM)

Solutions and Applications