Fluency AI Workflow – Unknown File Reputation is a specific workflow within the Fluency Security platform designed to handle endpoint security events where a file's reputation is indeterminate (neither confirmed safe nor flagged malicious). When an endpoint security platform reports execution of a file with unknown reputation, Fluency triggers an AI-driven investigative workflow to assess file intent, behavior, and potential impact prior to taking any action. Key capabilities compared to traditional SOAR approaches: - **Verdict Analysis:** Uses soft logic and reasoned output rather than binary yes/no verdicts. - **IOC Extraction:** Automatically extracts indicators of compromise from sandbox results, rather than relying on manual processes. - **Infrastructure Correlation:** AI-driven scoping correlates infrastructure context, rather than relying solely on rule-based methods. - **Workflow Flexibility:** Employs AI-driven modular workflows instead of fixed playbooks. - **Human Effort:** Reduces human involvement to QA and business-level review, rather than requiring human input to resolve every ambiguity. - **Result Explainability:** Provides an AI reasoning trace and tagging alongside outcomes, rather than returning only static results. The workflow targets security operations teams looking to automate the triage and analysis of ambiguous file execution events at the endpoint layer.