Translation mode is a detection engineering workspace within Prime Architect designed to help security teams generate, translate, validate, optimize, and manage detection content across multiple platforms and languages using Prime Architect's native translation engine and AI capabilities.
Functional Areas
The Translation mode consists of three functional areas, each focused on a different set of tasks. You can easily switch between them, keeping your work in progress:
Generate
Use our native Prime Architect engine and AI to perform the following tasks:
Generate a behavior rule/query from a threat report or other description of a malicious activity
Generate IOC queries from a threat report or any collection of IOCs
Generate a short or full summary of a detection rule or from a threat report
Generate a decision tree for a query's detection logic
Generate Attack Flow visualization from a threat report or other description of a malicious activity
Predict ATT&CK tags for a Sigma rule
Use a custom LLM prompt to perform custom tasks
Translate
Use our native translation engine and AI to translate detection content.
Improve
Use our native Prime Architect engine and AI to perform the following tasks: