Update baseline agents

2026-07-21 08:14:31 +02:00 · 2026-07-17 15:20:20 -04:00
2 changed files with 7 additions and 3 deletions
@@ -1531,7 +1531,8 @@ soc:
          agentic: false
          agentMapping:
            Orchestrator: sonnet
-            Hunter: sonnet
+            Investigator: sonnet
            Detection Engineer: sonnet
        onionconfig:
          saltstackDir: /opt/so/saltstack
          bypassEnabled: false
@@ -783,8 +783,11 @@ soc:
            Orchestrator:
              description: The initial agent in most agentic conversations. This agent will delegate requests to specialized agents.
              global: True
-            Hunter:
+            Investigator:
-              description: This agent is specialized in querying events.
+              description: This agent investigates alerts, explains events and records, and hunts through event data. It can also acknowledge alerts and escalate to cases.
              global: True
            Detection Engineer:
              description: This agent manages detections and their overrides, including tuning noisy rules and authoring rule content.
              global: True
      client:
        assistant: