> For the complete documentation index, see [llms.txt](https://docs.dropzone.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.dropzone.ai/platform/settings/custom-strategies.md).

# Custom Strategies

*Available to Admins only*

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-d95cf73ffc39639aed3fbcbc0cfb31427e1999c6%2Fui-settings-custom-strategies.png?alt=media" alt=""><figcaption><p>A Custom Strategy details view</p></figcaption></figure>

**Custom Strategies** allow organizations to inject domain-specific judgment into Dropzone’s investigation outcomes. These strategies influence how the AI SOC Analyst determines both:

* **Conclusions:** Malicious, Suspicious, Benign
* **Priorities:** Urgent, Notable, Informational

Custom Strategies are applied during the **Report phase** of an investigation and enable teams to:

* Override default interpretations of investigative findings
* Encode institutional policies and known patterns
* Provide consistent guidance for recurring or edge-case alert types

Custom Strategies are best suited for **decision logic** that applies broadly across investigations. If you find yourself encoding conditional logic, workflows, or policy enforcement, a Custom Strategy is likely the right tool.

To learn more about how to create great Custom Strategies read our [Custom Strategies Best Practices Guide](/best-practices/custom-strategies.md)
