Unverified50% confidenceFactExact time
The core of traditional SOAR (Security Orchestration, Automation and Response) is predefined playbooks, where when a certain type of alert is triggered, the system executes a fixed process written in advance by humans.
1
Sources
50%
Confidence
Long-term
Relevance
9/24/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedSOAR (Security Orchestration, Automation and Response) is currently the most mainstream type of automation platform in SOCs, automatically handling tasks such as alert triage, ticket creation, and threat intelligence queries through pre-written playbooks.79% similarUnverified将SOP作为Agent的动态知识库形成「执行→复盘→更新→再执行」的闭环迭代，通常依赖工具调用（Function Calling）能力实现67% similarUnverifiedThe common characteristic of traditional programs is that fixed instructions are input and fixed results are output.66% similarUnverified自定义指令本质上是一种系统提示词（System Prompt）的持久化机制，将用户规则注入系统提示词层62% similarUnverified终端Agent与传统Shell自动化的本质区别在于引入了大语言模型的推理层，能够根据命令执行的实时输出调整后续策略（反应式规划）62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/947026API
curl https://kongchang.com/api/v1/knowledge/claims/947026MCP
get_claim(id=947026)