Concord engine vocabulary
Reverse Transpiler
Compiles OCSF detections back into vendor-native query languages so one rule runs across every tool in the stack.
Definition
The Reverse Transpiler is the engine-side feature inside Concord by IaxaI that turns canonical OCSF detection logic back into vendor-native dialects: Splunk SPL, Sentinel KQL, CrowdStrike LogScale, Sigma YAML. Forward translation alone is table stakes now that OCSF won the schema war. The asymmetric work is the round-trip. Authors write a detection once against the canonical schema; Concord emits the vendor-specific version that runs unchanged on the target platform. For an MSSP this is the difference between maintaining the same rule in five dialects across a multi-tenant client base and shipping a single canonical detection that lights up everywhere. The transpiler is the foundation under the Detection Portability Layer surface. Patent-pending.
See also
Related capabilities and terms
Detection Portability Layer
Author a detection once against OCSF; Concord deploys it across every vendor surface in the stack.
OCSF (Open Cybersecurity Schema Framework)
The vendor-neutral event schema that won the schema war. Concord by IaxaI sits above OCSF, not parallel to it.
Universal Adapter
The connectivity layer that ingests events from any source and hands clean, canonical OCSF events to the rest of the engine.
Sentence Transformer Embeddings
Dense vectors that turn text into geometry, used for translation alignment, entity resolution, and knowledge-graph retrieval.
Stop reconciling. Start trusting one timeline.
30-minute walkthrough. Your tools. Your tenants. Your audit cycle. We will show you exactly where Concord earns its keep.