Behavioral anomaly detection across the feeds you already have
The fraud that does not match a named rule still shows up as a break in how that user normally behaves.
CYBERDETECT runs a behavioral anomaly pack across the logs you already produce: identity, payments, SIM, email, and SMS. Rules cover the named threats. This pack covers the pattern that crosses them.
A result is one incident, not a new product. The team gets it in Slack, Teams, or your SOAR and reviews it in the same workspace.
It can go live the same day. A case you want scored that is not in the catalog only needs the events for that case.