> For the complete documentation index, see [llms.txt](https://docs.dropzone.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.dropzone.ai/platform/settings/custom-strategies.md).

# Custom Strategies

*Available to Admins only*

<figure><img src="/files/11W6X8ILnSiC9KCCrzc4" alt=""><figcaption><p>A Custom Strategy details view</p></figcaption></figure>

**Custom Strategies** allow organizations to inject domain-specific judgment into Dropzone’s investigation outcomes. These strategies influence how the AI SOC Analyst determines both:

* **Conclusions:** Malicious, Suspicious, Benign
* **Priorities:** Urgent, Notable, Informational

Custom Strategies are applied during the **Report phase** of an investigation and enable teams to:

* Override default interpretations of investigative findings
* Encode institutional policies and known patterns
* Provide consistent guidance for recurring or edge-case alert types

Custom Strategies are best suited for **decision logic** that applies broadly across investigations. If you find yourself encoding conditional logic, workflows, or policy enforcement, a Custom Strategy is likely the right tool.

To learn more about how to create great Custom Strategies read our [Custom Strategies Best Practices Guide](/best-practices/custom-strategies.md)
