CrowdStrike Advances AI Reasoning for Cybersecurity Detection Triage
CrowdStrike has developed and implemented advanced AI models, powered by NVIDIA Nemotron, to enhance cybersecurity detection triage. These models are designed to not only classify security alerts as true or false positives but also to 'reason' through detections step-by-step, providing a transparent chain of reasoning before reaching a verdict. This approach, detailed in their research paper 'Cybersecurity Detection Classification with Reasoning-enabled Language Models,' aims to improve accuracy, enable safer automation of benign alerts, and prioritize genuine threats for human analysts. The research currently focuses on Windows endpoint detections, with plans to expand to other platforms.