Knowledge Extraction
Automatically extract reusable security knowledge from closed (with verdict) Cases and store it in the SIRP Knowledge worksheet.
Registered Name
Knowledge Extraction
Execution Flow
- Load complete Case data
- Check whether the Case has a verdict (skip if no verdict)
- Serialize Case data into AI analysis format and retrieve discussion records
- Call LLM to extract knowledge (title, body, tags)
- If extractable knowledge is found, create a Knowledge record
Trigger Methods
- Manually execute Playbook from the SIRP platform Case detail page
- Applicable to closed Cases that have been assigned a verdict