Your SOC is getting reinforcements that never sleep, never tire, and never clock out: AI and automation are taking over alert triage and initial response. Rising alert volumes, a shortage of skilled personnel, and increasingly complex attacks - the pressure makes these colleagues indispensable. But the crucial question isn’t what can be automated, but rather what cannot be automated at this point:

What decisions can the machine make - and where is an analyst still needed to truly understand attack patterns, validate results, identify correlations, and assess the implications of a response?

This presentation highlights both sides: the genuine benefits of automation and the limits beyond which human judgment remains irreplaceable. After all, the more AI takes over in operation ...