Innostage has released version 1.5.1 of its TDIR platform, an on-premise Agentic SOC solution designed to automate cybersecurity incident investigation. The system integrates with existing SIEM and SOAR tools using autonomous AI agents to filter false positives and perform historical correlation.
The update introduces an improved AntiFP mechanism that supports multiple testing algorithms for threat detection based on specific infrastructure needs. Users can now manually cancel automated SIEM queries during the analysis phase to optimize resource consumption.
The incident reporting module now includes four analytical pillars: false/true positive verdicts with confidence levels, detailed PowerShell analysis, historical incident mapping, and enrichment from Threat Intelligence and knowledge bases.
Technical enhancements include optimized parallel SIEM query execution, improved password handling, and an auto-fill feature for tactics and techniques based on standardized directories. Additionally, all services now feature health check mechanisms for automated testing.
