Use AI to generate a behavior rule from a threat report. Depending on the context you provide, AI will generate a behavior rule or multiple behavior rules in a Sigma format.
To generate a behavior rule:
Open Prime Architect and go to the Agentic Threat Research mode.
Provide the threat report in one of the following ways:
Add a link: add the report URL to your chat message. See Add URL.
Paste the text: click Code Editor in the upper right corner and paste the text of a threat report.
Tip: To remove all content from the editor, click the Clear Editor button.
Select the Generate button.
Select the Behavior Rule tool from the agentic AI tools options.
Click the Enter icon to proceed.
Select the rule tile to view the rule in the output panel.
Next Steps
Once the behavior rule/s has/ve been generated, you can:
Copy the rule to the clipboard and paste it into your system
Download a rule as a file by selecting Save As > File.txt or save a rule to a custom repository by selecting Save As > New Rule