Agentic AI and SOC: Investigating faster with artificial intelligence

Security teams must investigate increasingly complex environments, with information spread across multiple tools, consoles, and data sources.

How do you quickly find the right context, connect scattered events, and produce actionable insights without multiple manual searches?  

In this technical Attack Lab session, we'll examine how AI agents are being applied to real SOC workflows—from accelerating alert triage and threat hunting to automating investigative steps and surfacing high-confidence insights. We'll discuss the architectural foundations that make AI effective in security operations, including behavioral detection, contextual enrichment, and Model Context Protocol (MCP)-enabled integrations that allow AI agents to securely interact with security tools and data sources.

The objective: to provide concrete benchmarks for implementing these approaches in a controlled and operational manner.

‍

Key Points Discussed

• Automatically link detections, entities, and related events
• Identify priority threats and unusual behaviors
• Apply best practices for operationalizing AI in the SOC.
• Generate incident summaries
• Produce reports adapted to operational teams and security managers
• Discover a reference architecture based on MCP, skills and specialized agents
• Identify high-impact AI use cases in the SOC.

Who is this webinar for?

• SOC Managers
• SOC Analysts
• Threat Hunters
• Cybersecurity managers and CISOs