There’s a lot of unwarranted AI hype and appropriate backlash, so I was pleasantly surprised when I successfully tested if LLM + MCP with Graylog could accurately identify appropriate threat detections and required log sources based on threat actor tactics specific to industry and geography.
add a skeleton here at some point
3 months ago