<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
<!-- Generated by graphviz version 14.0.2 (20251019.1705)
-->
<!-- Title: AgentProfilesFlow Pages: 1 -->
<svg width="1846pt" height="510pt"
viewBox="0.00 0.00 1846.00 510.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 505.98)">
<title>AgentProfilesFlow</title>
<polygon fill="white" stroke="none" points="-4,4 -4,-505.98 1841.75,-505.98 1841.75,4 -4,4"/>
<g id="clust1" class="cluster">
<title>cluster_example_output</title>
<polygon fill="none" stroke="gray" stroke-dasharray="5,2" points="8,-305.98 8,-493.98 551.5,-493.98 551.5,-305.98 8,-305.98"/>
<text xml:space="preserve" text-anchor="middle" x="279.75" y="-476.68" font-family="Arial" font-size="14.00">Example CLI Output (for AI)</text>
</g>
<!-- manager -->
<g id="node1" class="node">
<title>manager</title>
<ellipse fill="lightgreen" stroke="black" cx="279.75" cy="-267.98" rx="127.99" ry="27.93"/>
<text xml:space="preserve" text-anchor="middle" x="279.75" y="-270.43" font-family="Arial" font-size="14.00">AgentProfileManager</text>
<text xml:space="preserve" text-anchor="middle" x="279.75" y="-254.68" font-family="Arial" font-size="14.00">(loads config, routes cases)</text>
</g>
<!-- agent_soc1_triage_agent -->
<g id="node3" class="node">
<title>agent_soc1_triage_agent</title>
<polygon fill="lightblue" stroke="black" points="1273.75,-439.48 919.5,-439.48 919.5,-368.48 1273.75,-368.48 1273.75,-439.48"/>
<text xml:space="preserve" text-anchor="middle" x="1096.62" y="-422.18" font-family="Arial" font-size="14.00">soc1_triage_agent</text>
<text xml:space="preserve" text-anchor="middle" x="1096.62" y="-406.43" font-family="Arial" font-size="14.00">SOC1 Triage Agent</text>
<text xml:space="preserve" text-anchor="middle" x="1096.62" y="-390.68" font-family="Arial" font-size="14.00">[SOC1]</text>
<text xml:space="preserve" text-anchor="middle" x="1096.62" y="-374.93" font-family="Arial" font-size="14.00">Handles initial alert triage and false positive identification</text>
</g>
<!-- manager->agent_soc1_triage_agent -->
<g id="edge1" class="edge">
<title>manager->agent_soc1_triage_agent</title>
<path fill="none" stroke="black" d="M402.35,-259.58C452.39,-261.82 508.56,-272.24 551.5,-301.98 559.35,-307.41 555.84,-313.3 561.5,-320.98 568.58,-330.59 569.77,-334.74 580.5,-339.98 636.98,-367.58 784.9,-384.1 907.82,-393.43"/>
<polygon fill="black" stroke="black" points="907.51,-396.91 917.74,-394.17 908.03,-389.93 907.51,-396.91"/>
</g>
<!-- agent_soc2_investigation_agent -->
<g id="node9" class="node">
<title>agent_soc2_investigation_agent</title>
<polygon fill="lightyellow" stroke="black" points="1261.38,-312.48 931.88,-312.48 931.88,-241.48 1261.38,-241.48 1261.38,-312.48"/>
<text xml:space="preserve" text-anchor="middle" x="1096.62" y="-295.18" font-family="Arial" font-size="14.00">soc2_investigation_agent</text>
<text xml:space="preserve" text-anchor="middle" x="1096.62" y="-279.43" font-family="Arial" font-size="14.00">SOC2 Investigation Agent</text>
<text xml:space="preserve" text-anchor="middle" x="1096.62" y="-263.68" font-family="Arial" font-size="14.00">[SOC2]</text>
<text xml:space="preserve" text-anchor="middle" x="1096.62" y="-247.93" font-family="Arial" font-size="14.00">Performs deep investigation and correlation analysis</text>
</g>
<!-- manager->agent_soc2_investigation_agent -->
<g id="edge7" class="edge">
<title>manager->agent_soc2_investigation_agent</title>
<path fill="none" stroke="black" d="M404.67,-274.32C451.46,-279.09 504.67,-287.43 551.5,-301.98 565.36,-306.28 566.4,-313.55 580.5,-316.98 710.92,-348.71 748.85,-329.41 882.5,-316.98 894.82,-315.83 907.49,-314.32 920.22,-312.56"/>
<polygon fill="black" stroke="black" points="920.52,-316.05 929.92,-311.16 919.52,-309.12 920.52,-316.05"/>
</g>
<!-- agent_soc3_response_agent -->
<g id="node13" class="node">
<title>agent_soc3_response_agent</title>
<polygon fill="lightcoral" stroke="black" points="1262.5,-109.48 930.75,-109.48 930.75,-38.48 1262.5,-38.48 1262.5,-109.48"/>
<text xml:space="preserve" text-anchor="middle" x="1096.62" y="-92.18" font-family="Arial" font-size="14.00">soc3_response_agent</text>
<text xml:space="preserve" text-anchor="middle" x="1096.62" y="-76.43" font-family="Arial" font-size="14.00">SOC3 Response Agent</text>
<text xml:space="preserve" text-anchor="middle" x="1096.62" y="-60.68" font-family="Arial" font-size="14.00">[SOC3]</text>
<text xml:space="preserve" text-anchor="middle" x="1096.62" y="-44.93" font-family="Arial" font-size="14.00">Executes incident response and containment actions</text>
</g>
<!-- manager->agent_soc3_response_agent -->
<g id="edge11" class="edge">
<title>manager->agent_soc3_response_agent</title>
<path fill="none" stroke="black" d="M303.07,-240.18C348.46,-186.16 457.69,-68.51 580.5,-24.98 711.17,21.34 871.5,-6 978.24,-35.01"/>
<polygon fill="black" stroke="black" points="977.01,-38.31 987.58,-37.6 978.88,-31.56 977.01,-38.31"/>
</g>
<!-- route_new_alert -->
<g id="node17" class="node">
<title>route_new_alert</title>
<polygon fill="lightgray" stroke="black" points="731.5,-481.48 637.5,-441.98 731.5,-402.48 825.5,-441.98 731.5,-481.48"/>
<text xml:space="preserve" text-anchor="middle" x="731.5" y="-444.43" font-family="Arial" font-size="14.00">Routing Rule</text>
<text xml:space="preserve" text-anchor="middle" x="731.5" y="-428.68" font-family="Arial" font-size="14.00">New Alert</text>
</g>
<!-- manager->route_new_alert -->
<g id="edge15" class="edge">
<title>manager->route_new_alert</title>
<path fill="none" stroke="black" d="M387.47,-252.55C443.77,-250.75 509.65,-259.75 551.5,-301.98 578.58,-329.31 537.05,-358.27 561.5,-387.98 581.2,-411.91 611.53,-425.37 641.09,-432.9"/>
<polygon fill="black" stroke="black" points="639.91,-436.22 650.44,-435.07 641.49,-429.4 639.91,-436.22"/>
</g>
<!-- route_review_cases -->
<g id="node18" class="node">
<title>route_review_cases</title>
<polygon fill="lightgray" stroke="black" points="731.5,-307.48 629.25,-267.98 731.5,-228.48 833.75,-267.98 731.5,-307.48"/>
<text xml:space="preserve" text-anchor="middle" x="731.5" y="-270.43" font-family="Arial" font-size="14.00">Routing Rule</text>
<text xml:space="preserve" text-anchor="middle" x="731.5" y="-254.68" font-family="Arial" font-size="14.00">Review Cases</text>
</g>
<!-- manager->route_review_cases -->
<g id="edge17" class="edge">
<title>manager->route_review_cases</title>
<path fill="none" stroke="black" d="M408.13,-267.98C473.79,-267.98 553.21,-267.98 616.79,-267.98"/>
<polygon fill="black" stroke="black" points="616.55,-271.48 626.55,-267.98 616.55,-264.48 616.55,-271.48"/>
</g>
<!-- route_requires_containment -->
<g id="node19" class="node">
<title>route_requires_containment</title>
<polygon fill="lightgray" stroke="black" points="731.5,-210.48 580.5,-170.98 731.5,-131.48 882.5,-170.98 731.5,-210.48"/>
<text xml:space="preserve" text-anchor="middle" x="731.5" y="-173.43" font-family="Arial" font-size="14.00">Routing Rule</text>
<text xml:space="preserve" text-anchor="middle" x="731.5" y="-157.68" font-family="Arial" font-size="14.00">Requires Containment</text>
</g>
<!-- manager->route_requires_containment -->
<g id="edge19" class="edge">
<title>manager->route_requires_containment</title>
<path fill="none" stroke="black" d="M372.03,-248.29C448.88,-231.72 558.37,-208.1 636.08,-191.34"/>
<polygon fill="black" stroke="black" points="636.79,-194.77 645.83,-189.24 635.31,-187.93 636.79,-194.77"/>
</g>
<!-- route_forensic_collection -->
<g id="node20" class="node">
<title>route_forensic_collection</title>
<polygon fill="lightgray" stroke="black" points="731.5,-113.48 600.75,-73.98 731.5,-34.48 862.25,-73.98 731.5,-113.48"/>
<text xml:space="preserve" text-anchor="middle" x="731.5" y="-76.43" font-family="Arial" font-size="14.00">Routing Rule</text>
<text xml:space="preserve" text-anchor="middle" x="731.5" y="-60.68" font-family="Arial" font-size="14.00">Forensic Collection</text>
</g>
<!-- manager->route_forensic_collection -->
<g id="edge21" class="edge">
<title>manager->route_forensic_collection</title>
<path fill="none" stroke="black" d="M329.1,-241.75C387.56,-210.67 489.44,-158.51 580.5,-121.98 603.5,-112.75 629.02,-104.04 652.39,-96.64"/>
<polygon fill="black" stroke="black" points="653.37,-100 661.87,-93.67 651.28,-93.32 653.37,-100"/>
</g>
<!-- example_output -->
<g id="node2" class="node">
<title>example_output</title>
<polygon fill="lightgray" stroke="black" points="537.5,-461.73 16,-461.73 16,-314.23 543.5,-314.23 543.5,-455.73 537.5,-461.73"/>
<polyline fill="none" stroke="black" points="537.5,-461.73 537.5,-455.73"/>
<polyline fill="none" stroke="black" points="543.5,-455.73 537.5,-455.73"/>
<text xml:space="preserve" text-anchor="middle" x="279.75" y="-444.43" font-family="Courier New" font-size="14.00">python src/mcp/flow_agent_profiles.py</text>
<text xml:space="preserve" text-anchor="middle" x="279.75" y="-427.93" font-family="Courier New" font-size="14.00">Reading agent profiles config from: config/agent_profiles.json</text>
<text xml:space="preserve" text-anchor="middle" x="279.75" y="-411.43" font-family="Courier New" font-size="14.00">✓ Loaded 3 agent profiles</text>
<text xml:space="preserve" text-anchor="middle" x="279.75" y="-393.43" font-family="Courier New" font-size="14.00">✓ Loaded 4 routing rules</text>
<text xml:space="preserve" text-anchor="middle" x="279.75" y="-375.43" font-family="Courier New" font-size="14.00">Generating DOT and SVG in: execution_flow</text>
<text xml:space="preserve" text-anchor="middle" x="279.75" y="-358.93" font-family="Courier New" font-size="14.00">✓ DOT file created: execution_flow/agent_profiles_flow.dot</text>
<text xml:space="preserve" text-anchor="middle" x="279.75" y="-340.93" font-family="Courier New" font-size="14.00">✓ SVG file created: execution_flow/agent_profiles_flow.svg</text>
<text xml:space="preserve" text-anchor="middle" x="279.75" y="-322.93" font-family="Courier New" font-size="14.00">✓ Agent profiles flow diagram generation complete!</text>
</g>
<!-- runbook_soc1_triage_initial_alert_triage -->
<g id="node4" class="node">
<title>runbook_soc1_triage_initial_alert_triage</title>
<polygon fill="white" stroke="black" points="1522.5,-421.98 1337,-421.98 1337,-385.98 1528.5,-385.98 1528.5,-415.98 1522.5,-421.98"/>
<polyline fill="none" stroke="black" points="1522.5,-421.98 1522.5,-415.98"/>
<polyline fill="none" stroke="black" points="1528.5,-415.98 1522.5,-415.98"/>
<text xml:space="preserve" text-anchor="middle" x="1432.75" y="-398.55" font-family="Arial" font-size="14.00">soc1/triage/initial_alert_triage</text>
</g>
<!-- agent_soc1_triage_agent->runbook_soc1_triage_initial_alert_triage -->
<g id="edge2" class="edge">
<title>agent_soc1_triage_agent->runbook_soc1_triage_initial_alert_triage</title>
<path fill="none" stroke="black" d="M1273.98,-403.98C1291.57,-403.98 1309.02,-403.98 1325.56,-403.98"/>
<polygon fill="black" stroke="black" points="1325.33,-407.48 1335.33,-403.98 1325.33,-400.48 1325.33,-407.48"/>
</g>
<!-- runbook_soc1_enrichment_ioc_enrichment -->
<g id="node5" class="node">
<title>runbook_soc1_enrichment_ioc_enrichment</title>
<polygon fill="white" stroke="black" points="1532.62,-367.98 1326.88,-367.98 1326.88,-331.98 1538.62,-331.98 1538.62,-361.98 1532.62,-367.98"/>
<polyline fill="none" stroke="black" points="1532.62,-367.98 1532.62,-361.98"/>
<polyline fill="none" stroke="black" points="1538.62,-361.98 1532.62,-361.98"/>
<text xml:space="preserve" text-anchor="middle" x="1432.75" y="-344.55" font-family="Arial" font-size="14.00">soc1/enrichment/ioc_enrichment</text>
</g>
<!-- agent_soc1_triage_agent->runbook_soc1_enrichment_ioc_enrichment -->
<g id="edge3" class="edge">
<title>agent_soc1_triage_agent->runbook_soc1_enrichment_ioc_enrichment</title>
<path fill="none" stroke="black" d="M1273.98,-375.48C1287.95,-373.22 1301.84,-370.97 1315.24,-368.81"/>
<polygon fill="black" stroke="black" points="1315.58,-372.3 1324.89,-367.25 1314.46,-365.39 1315.58,-372.3"/>
</g>
<!-- runbook_soc1_remediation_close_false_positive -->
<g id="node6" class="node">
<title>runbook_soc1_remediation_close_false_positive</title>
<polygon fill="white" stroke="black" points="1548.75,-475.98 1310.75,-475.98 1310.75,-439.98 1554.75,-439.98 1554.75,-469.98 1548.75,-475.98"/>
<polyline fill="none" stroke="black" points="1548.75,-475.98 1548.75,-469.98"/>
<polyline fill="none" stroke="black" points="1554.75,-469.98 1548.75,-469.98"/>
<text xml:space="preserve" text-anchor="middle" x="1432.75" y="-452.55" font-family="Arial" font-size="14.00">soc1/remediation/close_false_positive</text>
</g>
<!-- agent_soc1_triage_agent->runbook_soc1_remediation_close_false_positive -->
<g id="edge4" class="edge">
<title>agent_soc1_triage_agent->runbook_soc1_remediation_close_false_positive</title>
<path fill="none" stroke="black" d="M1273.98,-432.48C1284.81,-434.23 1295.59,-435.97 1306.13,-437.68"/>
<polygon fill="black" stroke="black" points="1305.55,-441.13 1315.98,-439.27 1306.66,-434.22 1305.55,-441.13"/>
</g>
<!-- case_runbook_soc1_cases_suspicious_login_triage -->
<g id="node7" class="node">
<title>case_runbook_soc1_cases_suspicious_login_triage</title>
<polygon fill="lightcyan" stroke="black" points="1816.38,-432.98 1651.88,-432.98 1651.88,-396.98 1822.38,-396.98 1822.38,-426.98 1816.38,-432.98"/>
<polyline fill="none" stroke="black" points="1816.38,-432.98 1816.38,-426.98"/>
<polyline fill="none" stroke="black" points="1822.38,-426.98 1816.38,-426.98"/>
<text xml:space="preserve" text-anchor="middle" x="1737.12" y="-411.48" font-family="Arial" font-size="10.00">soc1/cases/suspicious_login_triage</text>
</g>
<!-- runbook_soc1_triage_initial_alert_triage->case_runbook_soc1_cases_suspicious_login_triage -->
<g id="edge5" class="edge">
<title>runbook_soc1_triage_initial_alert_triage->case_runbook_soc1_cases_suspicious_login_triage</title>
<path fill="none" stroke="gray" stroke-dasharray="5,2" d="M1528.59,-407.43C1564.15,-408.72 1604.55,-410.19 1640.2,-411.49"/>
<polygon fill="gray" stroke="gray" points="1639.97,-414.98 1650.09,-411.85 1640.22,-407.99 1639.97,-414.98"/>
<text xml:space="preserve" text-anchor="middle" x="1595.62" y="-412.91" font-family="Arial" font-size="14.00">can call</text>
</g>
<!-- case_runbook_soc1_cases_malware_initial_triage -->
<g id="node8" class="node">
<title>case_runbook_soc1_cases_malware_initial_triage</title>
<polygon fill="lightcyan" stroke="black" points="1812.62,-378.98 1655.62,-378.98 1655.62,-342.98 1818.62,-342.98 1818.62,-372.98 1812.62,-378.98"/>
<polyline fill="none" stroke="black" points="1812.62,-378.98 1812.62,-372.98"/>
<polyline fill="none" stroke="black" points="1818.62,-372.98 1812.62,-372.98"/>
<text xml:space="preserve" text-anchor="middle" x="1737.12" y="-357.48" font-family="Arial" font-size="10.00">soc1/cases/malware_initial_triage</text>
</g>
<!-- runbook_soc1_triage_initial_alert_triage->case_runbook_soc1_cases_malware_initial_triage -->
<g id="edge6" class="edge">
<title>runbook_soc1_triage_initial_alert_triage->case_runbook_soc1_cases_malware_initial_triage</title>
<path fill="none" stroke="gray" stroke-dasharray="5,2" d="M1528.59,-390.49C1565.48,-385.25 1607.59,-379.26 1644.19,-374.05"/>
<polygon fill="gray" stroke="gray" points="1644.45,-377.55 1653.86,-372.68 1643.47,-370.62 1644.45,-377.55"/>
<text xml:space="preserve" text-anchor="middle" x="1595.62" y="-386.22" font-family="Arial" font-size="14.00">can call</text>
</g>
<!-- runbook_soc2_investigation_case_analysis -->
<g id="node10" class="node">
<title>runbook_soc2_investigation_case_analysis</title>
<polygon fill="white" stroke="black" points="1532.62,-294.98 1326.88,-294.98 1326.88,-258.98 1538.62,-258.98 1538.62,-288.98 1532.62,-294.98"/>
<polyline fill="none" stroke="black" points="1532.62,-294.98 1532.62,-288.98"/>
<polyline fill="none" stroke="black" points="1538.62,-288.98 1532.62,-288.98"/>
<text xml:space="preserve" text-anchor="middle" x="1432.75" y="-271.55" font-family="Arial" font-size="14.00">soc2/investigation/case_analysis</text>
</g>
<!-- agent_soc2_investigation_agent->runbook_soc2_investigation_case_analysis -->
<g id="edge8" class="edge">
<title>agent_soc2_investigation_agent->runbook_soc2_investigation_case_analysis</title>
<path fill="none" stroke="black" d="M1261.75,-276.98C1279.89,-276.98 1298.08,-276.98 1315.46,-276.98"/>
<polygon fill="black" stroke="black" points="1315.24,-280.48 1325.24,-276.98 1315.24,-273.48 1315.24,-280.48"/>
</g>
<!-- case_runbook_soc2_cases_malware_deep_analysis -->
<g id="node11" class="node">
<title>case_runbook_soc2_cases_malware_deep_analysis</title>
<polygon fill="lightcyan" stroke="black" points="1817.88,-302.98 1650.38,-302.98 1650.38,-266.98 1823.88,-266.98 1823.88,-296.98 1817.88,-302.98"/>
<polyline fill="none" stroke="black" points="1817.88,-302.98 1817.88,-296.98"/>
<polyline fill="none" stroke="black" points="1823.88,-296.98 1817.88,-296.98"/>
<text xml:space="preserve" text-anchor="middle" x="1737.12" y="-281.48" font-family="Arial" font-size="10.00">soc2/cases/malware_deep_analysis</text>
</g>
<!-- runbook_soc2_investigation_case_analysis->case_runbook_soc2_cases_malware_deep_analysis -->
<g id="edge9" class="edge">
<title>runbook_soc2_investigation_case_analysis->case_runbook_soc2_cases_malware_deep_analysis</title>
<path fill="none" stroke="gray" stroke-dasharray="5,2" d="M1539.08,-279.76C1571.56,-280.62 1607.15,-281.57 1639.04,-282.41"/>
<polygon fill="gray" stroke="gray" points="1638.55,-285.9 1648.64,-282.66 1638.74,-278.9 1638.55,-285.9"/>
<text xml:space="preserve" text-anchor="middle" x="1595.62" y="-284.14" font-family="Arial" font-size="14.00">can call</text>
</g>
<!-- case_runbook_soc2_cases_suspicious_login_investigation -->
<g id="node12" class="node">
<title>case_runbook_soc2_cases_suspicious_login_investigation</title>
<polygon fill="lightcyan" stroke="black" points="1831.75,-248.98 1636.5,-248.98 1636.5,-212.98 1837.75,-212.98 1837.75,-242.98 1831.75,-248.98"/>
<polyline fill="none" stroke="black" points="1831.75,-248.98 1831.75,-242.98"/>
<polyline fill="none" stroke="black" points="1837.75,-242.98 1831.75,-242.98"/>
<text xml:space="preserve" text-anchor="middle" x="1737.12" y="-227.48" font-family="Arial" font-size="10.00">soc2/cases/suspicious_login_investigation</text>
</g>
<!-- runbook_soc2_investigation_case_analysis->case_runbook_soc2_cases_suspicious_login_investigation -->
<g id="edge10" class="edge">
<title>runbook_soc2_investigation_case_analysis->case_runbook_soc2_cases_suspicious_login_investigation</title>
<path fill="none" stroke="gray" stroke-dasharray="5,2" d="M1539.08,-260.95C1566.92,-256.72 1597.04,-252.14 1625.17,-247.86"/>
<polygon fill="gray" stroke="gray" points="1625.4,-251.36 1634.76,-246.4 1624.34,-244.44 1625.4,-251.36"/>
<text xml:space="preserve" text-anchor="middle" x="1595.62" y="-257.81" font-family="Arial" font-size="14.00">can call</text>
</g>
<!-- runbook_soc3_response_endpoint_isolation -->
<g id="node14" class="node">
<title>runbook_soc3_response_endpoint_isolation</title>
<polygon fill="white" stroke="black" points="1534.88,-91.98 1324.62,-91.98 1324.62,-55.98 1540.88,-55.98 1540.88,-85.98 1534.88,-91.98"/>
<polyline fill="none" stroke="black" points="1534.88,-91.98 1534.88,-85.98"/>
<polyline fill="none" stroke="black" points="1540.88,-85.98 1534.88,-85.98"/>
<text xml:space="preserve" text-anchor="middle" x="1432.75" y="-68.55" font-family="Arial" font-size="14.00">soc3/response/endpoint_isolation</text>
</g>
<!-- agent_soc3_response_agent->runbook_soc3_response_endpoint_isolation -->
<g id="edge12" class="edge">
<title>agent_soc3_response_agent->runbook_soc3_response_endpoint_isolation</title>
<path fill="none" stroke="black" d="M1262.73,-73.98C1279.69,-73.98 1296.69,-73.98 1313.01,-73.98"/>
<polygon fill="black" stroke="black" points="1312.67,-77.48 1322.67,-73.98 1312.67,-70.48 1312.67,-77.48"/>
</g>
<!-- runbook_soc3_response_process_termination -->
<g id="node15" class="node">
<title>runbook_soc3_response_process_termination</title>
<polygon fill="white" stroke="black" points="1541.62,-37.98 1317.88,-37.98 1317.88,-1.98 1547.62,-1.98 1547.62,-31.98 1541.62,-37.98"/>
<polyline fill="none" stroke="black" points="1541.62,-37.98 1541.62,-31.98"/>
<polyline fill="none" stroke="black" points="1547.62,-31.98 1541.62,-31.98"/>
<text xml:space="preserve" text-anchor="middle" x="1432.75" y="-14.55" font-family="Arial" font-size="14.00">soc3/response/process_termination</text>
</g>
<!-- agent_soc3_response_agent->runbook_soc3_response_process_termination -->
<g id="edge13" class="edge">
<title>agent_soc3_response_agent->runbook_soc3_response_process_termination</title>
<path fill="none" stroke="black" d="M1262.73,-47.29C1277.39,-44.93 1292.07,-42.55 1306.32,-40.25"/>
<polygon fill="black" stroke="black" points="1306.84,-43.71 1316.15,-38.66 1305.72,-36.8 1306.84,-43.71"/>
</g>
<!-- runbook_soc3_forensics_artifact_collection -->
<g id="node16" class="node">
<title>runbook_soc3_forensics_artifact_collection</title>
<polygon fill="white" stroke="black" points="1531.88,-145.98 1327.62,-145.98 1327.62,-109.98 1537.88,-109.98 1537.88,-139.98 1531.88,-145.98"/>
<polyline fill="none" stroke="black" points="1531.88,-145.98 1531.88,-139.98"/>
<polyline fill="none" stroke="black" points="1537.88,-139.98 1531.88,-139.98"/>
<text xml:space="preserve" text-anchor="middle" x="1432.75" y="-122.55" font-family="Arial" font-size="14.00">soc3/forensics/artifact_collection</text>
</g>
<!-- agent_soc3_response_agent->runbook_soc3_forensics_artifact_collection -->
<g id="edge14" class="edge">
<title>agent_soc3_response_agent->runbook_soc3_forensics_artifact_collection</title>
<path fill="none" stroke="black" d="M1262.73,-100.66C1280.8,-103.58 1298.91,-106.51 1316.19,-109.3"/>
<polygon fill="black" stroke="black" points="1315.5,-112.74 1325.93,-110.88 1316.62,-105.83 1315.5,-112.74"/>
</g>
<!-- route_new_alert->agent_soc1_triage_agent -->
<g id="edge16" class="edge">
<title>route_new_alert->agent_soc1_triage_agent</title>
<path fill="none" stroke="black" d="M807.74,-434.1C837.2,-431.02 872.43,-427.33 907.98,-423.62"/>
<polygon fill="black" stroke="black" points="907.92,-427.14 917.5,-422.62 907.19,-420.18 907.92,-427.14"/>
</g>
<!-- route_review_cases->agent_soc2_investigation_agent -->
<g id="edge18" class="edge">
<title>route_review_cases->agent_soc2_investigation_agent</title>
<path fill="none" stroke="black" d="M828.86,-270.37C857.05,-271.07 888.79,-271.85 920.28,-272.63"/>
<polygon fill="black" stroke="black" points="919.8,-276.12 929.88,-272.87 919.97,-269.12 919.8,-276.12"/>
</g>
<!-- route_requires_containment->agent_soc3_response_agent -->
<g id="edge20" class="edge">
<title>route_requires_containment->agent_soc3_response_agent</title>
<path fill="none" stroke="black" d="M807.3,-151C848.51,-139.99 901.1,-125.94 950.05,-112.86"/>
<polygon fill="black" stroke="black" points="950.87,-116.27 959.63,-110.31 949.06,-109.51 950.87,-116.27"/>
</g>
<!-- route_forensic_collection->agent_soc3_response_agent -->
<g id="edge22" class="edge">
<title>route_forensic_collection->agent_soc3_response_agent</title>
<path fill="none" stroke="black" d="M863.85,-73.98C881.85,-73.98 900.55,-73.98 919.19,-73.98"/>
<polygon fill="black" stroke="black" points="918.95,-77.48 928.95,-73.98 918.95,-70.48 918.95,-77.48"/>
</g>
</g>
</svg>
