[Feature Request] Add INVESTIGATION in detection rule. #1633
Description
Is your feature request related to a problem? Please describe
When i use AI/LLM, context of rule just have false positive causes difficulties in the automation process.
Describe the solution you'd like
Field INVESTIGATION appears in detection rules similarly to field false positive
Related component
Other
Describe alternatives you've considered
No response
Additional context
No response