Translation mode is a detection engineering workspace within Prime Architect designed to help security teams generate, translate, validate, optimize, and manage detection content across multiple platforms and languages using Prime Architect's native translation engine and AI capabilities.
Functional Areas
The Translation mode consists of three functional areas, each focused on a different set of tasks. You can easily switch between them, keeping your work in progress:
Generate
Use our native Prime Architect engine and AI to perform the following tasks:
Generate a behavior rule/query in 56 languages from a threat report or other description of a malicious activity
Generate IOC queries in 31 languages from a threat report or any collection of IOCs
Generate a short or full summary of a detection rule in any of the 48 supported languages or from a threat report
Generate a decision tree for a query's detection logic in any of the 48 supported languages
Generate Attack Flow visualization from a threat report or other description of a malicious activity
Predict ATT&CK tags for a Sigma rule
Use a custom LLM prompt to perform custom tasks
Translate
Use our native translation engine and AI to perform the following tasks:
Improve
Use our native Prime Architect engine and AI to perform the following tasks:
Validate a query or rule syntax and structure in 56 languages
Optimize queries in 48 languages
Group query results in 9 languages
More Features
In addition, Prime Architect empowers full use case management life cycle:
Search for detection content in Prime Core
Write detection content in a convenient editor
Customize stock translations to tailor them to your data schema and infrastructure
Save content to custom repositories
Deploy content to your SIEM or push it to a Git repository