Using AI to identify gaps in threat detection
In an article published on January 31, 2026, Microsoft describes an AI workflow that extracts TTPs from reports, compares them with existing detections, and flags potential gaps for human review.
Source: Usando IA para transformar relatórios de ameaças em insights de detecção (microsoft.com). Text prepared with AI from this source.
What happened and what to do
In an article published on January 31, 2026, Microsoft describes a workflow that uses AI to extract tactics, techniques, and procedures (TTPs) from threat reports, map existing detection coverage, and flag potential gaps. Human experts review and validate the results. The article says the process can help security teams identify gaps and accelerate detection engineering.
A company could implement a pipeline to ingest reports, extract TTPs, map them to detection rules, and present potential gaps for review by responsible staff. Human validation should remain part of the process before changes are made to rules or response procedures.
How the consultancy can help
Wendelmaques can assess how your team collects reports and maintains detections, define the solution scope, and implement and operate the pipeline, integrations, and review dashboard.
Next step
Send a short description of your security environment and current detection engineering process to receive a scoped proposal.
Let's assess your project
I reply with scope and a proposal.