kql sigma

Microsoft’s new CTI-REALM benchmark is notable because it moves the conversation about AI in cybersecurity away from trivia and toward operational value. Instead of asking whether a model can merely identify a threat technique, the benchmark tests whether an AI agent can read a threat report...