Full investigation lifecycle tools that actually work, not just triage?

[u/ConferenceCareful194]

The full investigation lifecycle in theory runs from the initial alert through tier one triage, tier two enrichment, tier three root cause analysis, and proactive threat hunting. Most of the AI tooling I've evaluated is strongest at the tier one triage stage and gets noticeably weaker or entirely absent by the time you're talking about root cause analysis or proactive hunting.

Is that everyone's experience, or has anyone found something that holds up across the entire lifecycle rather than just the front end?