raffkin

Raffkin — an agentic SOC plug-in for Exabeam New-Scale: investigates alerts, triages the case queue and finds noisy detection rules in Claude Code or OpenAI Codex, with deterministic guardrails and a human approving every consequential action.

GitHub

Official source

Start locally with the CLI guide