❌

Normal view

There are new articles available, click to refresh the page.
Before yesterdayCisco Security

Admin in the Loop: Firewalls and the Agentic SOC

8 October 2026 at 11:00
Discover how Cisco Secure Firewall and Cloud Control stream structured Snort 3 and EVE telemetry into Splunk ES to power the .conf26 Agentic SOC pipeline.

Splunk .conf26: Tracking the Triage Agent in the Agentic SOC

8 October 2026 at 11:00
How Cisco used Splunk as the SOC data platform at .conf26 to unify security telemetry and track the Splunk AI Triage Agent with human-validated workflows.

SharpHound Recon Attack – How AI enhanced the threat hunt

7 July 2026 at 13:59
During the Cisco Live Americas 2026 Agentic SOC, we discovered and investigated suspicious LDAP activity both manually and with the assistance of AI. This helped us understand how the Agentic SOC can improve the threat-hunting process.

AIM: Building an Agentic Tier-2 SOC Analyst at Cisco Live AMER 2026

7 July 2026 at 13:54
An Agentic Incident Mate that triages a Cisco Extended Detection and Response (XDR) incident end-to-end across XDR, EndaceProbe, and Splunk Enterprise Security, and returns a Tier-2 report in minutes.
❌
❌