Fighting Every Threat with AI Agents: The Future of Security Operations
summary
Claims a SOC staffed at 400 people becomes unnecessary by replacing manual work with autonomous agents that ingest, detect, investigate and act. Agents normalize incoming logs into OCSF, run inside a medallion architecture (bronze/silver/gold), monitor and self-heal brittle pipelines, auto-generate hypotheses and write detection code in SQL or SPL, enrich records, triage hundreds of daily alerts, and trigger automated response playbooks via the Databricks Open Security Lakehouse.
AI-written summary · about
related talks
53mSecurity Operations 2018: What Is Working? What Is Not.
32mThe SOC Of The Future… The Future Is Now
33mThe Only Way to Survive Is to Automate Your SOC
45mArchitecting the Modern SOC: The Evolving AI Reality for Blue Teams
28mScaling Your Defenses: Next Level Security Automation for Enterprise
49mStories from the SOC Front Lines
17mOutpace Cyber Threats with Agentic AI + Human Ingenuity
01h 01mAI and the SOC Engineer: The Evolving Human Element in Security