AI SOC is Dead

As AI gets better, cybersecurity defenders continue to try to fit it into existing processes. The best example of this is AI SOC, i.e. using AI to triage alerts and perform the role of level one SOC analysts.

This is a mistake.

AI is an opportunity to rethink those processes, not replicate them. This talk explains how AI can completely transform detection and response in a way that breaks the existing SOC model, and why that is a good thing. It walks through the real use cases for AI in this space, and the challenges we face in making that a reality.