Automating the Junior Analyst: Cyber Security Report Generation with Classic AI
summary
Fabric is a content-generation pipeline that turns SIEM alerts, STIX2 CTI bundles, detection rules and CVE lists into overviews, timelines and briefings using a declarative DSL that models a report as a tree, a three-step symbolic pipeline for filtering and micro-planning, and a constrained ML step (example: fine-tuned BART 400M or graph-to-text nets) to render language. An MVP is implemented and reduces copy‑paste work and enables on‑prem deployment, but final human signoff remains required. Fabric
AI-written summary · about
chapters (8)
- 0:00Automated cyber reporting intro
- 2:11Manual report challenges
- 7:28Static templates to code
- 9:15Symbolic AI vs machine learning
- 11:50Three-step report pipeline
- 14:01ML and rule-based balance
- 17:35Automation per use case
- 18:42Conclusion and future
related talks
30mProcessing Threat Reports at Scale Using AI and ML: Expectations and Reality
45mHarnessing Data Science and AI in Fabric
30mCybersecurity Risk Assessment Using LLM Agents and Graph Data Science
40mAutomation of Security Scanning: Easy or Cheese
31mSkynet the CTI Intern: Building Effective Machine Augmented...
17mElevating security investigations with generative AI
38mFrom Recon to Reporting
26mImproving Cybersecurity Posture with an AI Security Assistant