From Days to Minutes: AI-Assisted Rule Writing for Threat Hunters | Corelight
A security incident response team encountered issues with NDR rules that generated false positives due to incompatibility with their IDS, Suricata, which led to unnecessary noise and prompted manual r