Threat Detection Overview

AI-driven detection intelligence — machine velocity, human context

Total marmalade Cyber Custom Detections

Bespoke detection rules authored and maintained by marmalade Cyber analysts

Security Operations Response

Response actions currently enabled for your environment

Analyst-Initiated Response

Actions performed by a SOC analyst via the platform after investigation.

Autonomous Response

Pre-approved actions that run automatically when specific high-confidence triggers are met.

Deep-Dive Analytics

The following sections show details for all cases processed by the SOC, including those not escalated as incidents.

Cases Created This Month

Breakdown of all cases investigated by the SOC this month, including both escalated incidents and non-malicious findings.

Top accounts by alerts (30d)

Entities with the highest volume of alerts investigated by the SOC.

Top devices by alerts (30d)

Entities with the highest volume of alerts investigated by the SOC.

Top source IPs by alerts (30d)

Entities with the highest volume of alerts investigated by the SOC.

Top alerting rules (last 30 days)

Detection rules with the highest volume of alerts investigated by the SOC.