Legacy platforms rely on brittle, hand-written rules. An engineer writes a detection rule : 'if events A, B, & C happen in sequence, fire an alert.' It works for a couple months.
这一描述揭示了传统安全检测系统的根本局限性：规则脆弱且需要持续维护。'works for a couple months'这一表述特别有洞察力，暗示了传统方法在快速变化的IT环境中根本不可持续，这为Artemis的自主检测系统提供了强有力的合理性。