Comment by gxenos95

valid. but the idea is that the llm can reason about the output of many tools, not only traditional av scanners. for example you can have an undetectable malware sample that the llm can analyze by running it in a sandbox; something traditional av scanners will never do.