Real-time ML classification, autonomous iptables mitigation, and an AI SOC copilot with 30+ live diagnostic tools.