A suspicious login can be the beginning of an intrusion—or an employee working from an unfamiliar location. The hard part is establishing what happened next, which systems were involved, and whether the evidence justifies interrupting someone’s access. Artemis Security is betting that a model trained specifically for defensive operations can make those decisions more effectively. The company has announced Orion-1, a proprietary foundation model for cyber defense that investigates threats across…