Use AI to analyze the syntax and structure of a rule/query and flag syntax errors and logic flaws, get suggestions on improvements, or confirm that everything is correct. This feature reduces the time spent manually debugging syntax or structural issues to enable faster iteration and deployment of new detections.
Note that for Sigma and Roota this feature uses Warden engine rather than AI.
Go to the Improve mode in Uncoder AI.
Paste your query/rule in the input panel or upload it from a file. The platform (language) of your query/rule is automatically detected in the source language dropdown. Ensure it is correct or modify it if needed.
Select Validate as the action to be taken.
Click Improve.
The result is shown in the output panel.
Next Steps
Once the validation output has been generated, you can:
Copy the output to the clipboard in Markdown
Generate a short or full summary for your input rule/query
Run your input rule/query in your SIEM/EDR/Data Lake or push it to a Git repository
Copy your input rule/query to the clipboard and paste it into your system or download the rule/query as a file
Save your input rule/query to a custom repository
Translate your input rule/query into a different language
Validate your input rule/query syntax and structure
Optimize your query
Group query results
Make custom modifications with AI
Supported Platforms
To find out what platforms (languages) are supported, see this article.