After AI Triage: The Era of the Self-Healing SOC
AI made the SOC faster, not stronger. See how a self-improving SOC turns every alert into compounding defense against AI-driven attacks.
Topic
When & Where
Details
Format:
Technology lecture
Language:
English
Session description
Speaker: Jean-Baptiste Guglielmine
AI has already solved the problem that defined a decade of security operations: triage. Alerts are handled in seconds, investigations run many times faster, and the Tier-1 bottleneck is fading. But a faster SOC is not a stronger one — and attackers now find and exploit gaps in minutes, not days.
The next frontier isn't speed. It's a SOC that compounds. Today, context is fragmented, knowledge leaves when analysts do, and teams still work in silos — so every incident starts from zero. Imagine the opposite: a SOC where every investigation makes the next one sharper, where each resolved alert strengthens detections, guides better response, and feeds one shared picture of risk across security and vulnerability teams.
This is the shift from ...
