---
title: AI Agents Case Management Extension Release 1.0.0
slug: turbine-release-notes/ai-agents-case-management-extension-release-100
docTags: 
createdAt: 2025-11-26T09:24:41.486Z
---

AI Agents Case Management Extension introduces Hero AI-powered analysis capabilities to the SOC Solutions Bundle, providing automated threat analysis, verdict classification, and actionable recommendations to accelerate SOC analyst workflows.

## Features

The extension includes three specialized Hero AI agents:

**Investigation Agent**

- Provides immediate visual verdict, severity, and actionable recommended actions (Containment, Eradication, Recovery) for every security case
- Visual severity rating and verdict (Malicious, Suspicious, or Benign) for quick prioritization
- NIST-aligned action recommendations and validation checks
- AI confidence score (0-100) with data correlation from Knowledge Base, historical learning, and current case details
- Automated case title generation and affected entities visualization

**Verdict and Threat Intelligence Analysis Agent**

- Delivers investigation case summary and final threat classification with quantifiable AI confidence score (0-100)
- Correlates data from knowledge articles, historical outcomes, and analyst notes/verdicts
- Integrates threat intelligence from multiple sources (VirusTotal, Recorded Future, Mandiant, AbuseIPDB, URLHaus, and other third-party feeds)
- User-defined weighting for providers, observable types, and threat formula weights

**MITRE ATT\&CK & D3FEND Agent**

- Maps and enriches associated TTPs (Tactics, Techniques, and Procedures) to enhance threat context
- Automatically maps MITRE ATT\&CK TTPs (T-Codes) using pre-existing data from security alerts
- Contextual enrichment using intelligence from other security cases, threat feeds, and knowledge base articles
- Automatically includes MITRE D3FEND recommendations in output and security reports

## Installation

Install the extension from the Swimlane Content Library: Navigate to **Library** > **Swimlane Content**, select **AI Agents Case Management Extension**, and click **Install**.

**Prerequisites**: Install the SOC Solution in Swimlane Turbine before installing the extension.

For detailed installation and configuration instructions, see the [Swimlane AI Agents Case Management Extension](docId\:KNb0Auvuq4Tb-5S13XbWD).