Security Operations Center

blogs.cisco.com·há cerca de 1 mês

SharpHound Recon Attack – How AI enhanced the threat hunt

During the Cisco Live Americas 2026 Agentic SOC, we discovered and investigated suspicious LDAP activity both manually and with the assistance of AI. This helped us understand how the Agentic SOC can

blogs.cisco.com·há cerca de 1 mês

What Working the Cisco Live SOC Taught Me About AI, Detection, and Response

A product manager’s view from the Cisco Live SOC on using AI, Splunk ES, and XDR to investigate faster and build better detection and response products.

blogs.cisco.com·há 2 meses

Defenseclaw for On-Prem AI SOC Workflow at Black Hat Asia

At Black Hat Asia, we tested a private AI SOC workflow built with Ollama, NVIDIA GPU acceleration, Open WebUI, OpenClaw, DefenseClaw, Cisco AI Defense and MCP integrations, with Splunk audit visibilit

SharpHound Recon Attack &#8211; How AI enhanced the threat hunt

What Working the Cisco Live SOC Taught Me About AI, Detection, and Response

Defenseclaw for On-Prem AI SOC Workflow at Black Hat Asia

SharpHound Recon Attack – How AI enhanced the threat hunt