The Only Way to Survive Is to Automate Your SOC
summary
Explains Security Automation and Orchestration for SOCs, arguing that automation is necessary to scale teams, prioritise incidents, and reduce response time. Describes building and using open-source tools and threat intelligence, compares building vs buying (including ML algorithm reliability), and shows how automation and machine learning help handle malware, phishing, and other security incidents while saving costs.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 5:18Automation in SOC critical
- 13:51Phishing analysis demo
- 23:38Behavioral detection automation
- 28:17Key takeaways
- 29:22Q&A
related talks
03mFighting Every Threat with AI Agents: The Future of Security Operations
44mWhat I learnt about automating security
32mThe SOC Of The Future… The Future Is Now
51mThe No BS SOC Story
28mScaling Your Defenses: Next Level Security Automation for Enterprise
17mIncident Response @ Scale-Building a Next Generation SOC
53mSecurity Operations 2018: What Is Working? What Is Not.
41mOne SOC, The Whole SOC, and Nothing But The SOC, So Help Me