MTTI

Mean time to investigate. How long it takes to reach a verdict on an alert. Accton took theirs from three hours to ten minutes. Accton case study

Defined in the AI SOC glossary.

Other terms

Agentic SOC — AI agents carry work to completion; analysts supervise.
AI SOC — The broad term, covering assistant through to full agent.
Alert triage — Deciding whether an alert is real. Where analyst hours go.
Exabots — Exaforce's five task-specific AI agents.
MDR — Managed detection and response, run by an external team.
MTTR — Mean time to respond: detection through to containment.
Multi-Model AI — Exaforce's three-model reasoning engine.
Semantic context — Structured meaning attached to events at ingest.
SIEM — The traditional log aggregation layer. Exaforce is not one.
SOAR playbooks — Deterministic automation scripts, and why they break.
Threat hunting — Searching for adversary activity that no alert fired on.
UEBA — Baselining normal behavior to spot deviation from it.