Labels

AI-assisted workflows and copilots

Alert queue, triage, grouping, and status workflows

Audit logging and traceability

Signal and event correlation

Dashboards and visual summaries

Detection rules, packs, testing, and lifecycle

Context enrichment and lookup data

Threat hunt and search workflows

Log ingestion sources and transports

Investigation artifacts and analyst workflows

Parsing and canonical event normalization

Operational reliability and SOC health

Playbooks, tasks, and response workflows

Roles, permissions, and scoped access

Risk scoring and risk context

Query languages, pivots, and search UX

Threat intelligence indicators and feeds

Behavior and entity analytics

User interface work

Backend, storage, API, or job work

Something isn't working

Competitive differentiator capability

Improvements or additions to documentation

This issue or pull request already exists

New feature or request

Missing or incomplete enterprise capability

User interface or analyst workflow work

Good for newcomers

Extra attention is needed

This doesn't seem right