The Whiteleaf AI Security Detections app contains 80+ correlation searches that rely on a combination of SPL and AI to determine the riskiness of threats.
The AI functionality evaluates the threats on an individual basis, and also integrates with Splunk's Risk Based Alerting (RBA) to evaluate the holistic riskiness of users and systems.