Security Operations Center (SOC)

The Hidden SecOps Bottleneck: Getting the Right Data In and the Right Actions Out

AI-driven security, Artificial Intelligence, Cybersecurity, MSSPs, Security Operations Center (SOC), SOC / /

Every security team wants better outcomes. Faster detection. Faster triage. Faster investigation. Faster response. But many teams are slowed down by a less visible problem: operational friction. A customer has a data source that is not supported yet. A parser needs to be built. A log format is messy. A hunting playbook works in one […]

The Hidden SecOps Bottleneck: Getting the Right Data In and the Right Actions Out Read More »

The Human-augmented autonomous SOC: A Perfect Blend of Technology and Humanity

AI-driven security, Application Security, Artificial Intelligence, Cybersecurity, Security Operations Center (SOC), SOC / /

Just after the turn of the century, IBM introduced the term, ‘autonomic IT.” At the time, IBM’s perspective was that IT applications, networks, and systems had become too complex for humans to manage, monitor, or secure. IBM presented its autonomic IT concept, with a vision of IT systems that could manage themselves with advanced capabilities

The Human-augmented autonomous SOC: A Perfect Blend of Technology and Humanity Read More »

NDR is a Requirement for Modern Security Defenses and the Agentic SOC

AI-driven security, Artificial Intelligence, Cybersecurity, Network Security, Security Operations Center (SOC), security technology, SOC / /

Network Detection and Response (NDR) has been the Rodney Dangerfield of security tools over the past few years – “it don’t get no respect.” Conceivably, this state of disrepute came from all the marketing money thrown at Endpoint Detection and Response (EDR) and eXtended Detection and Response (XDR). It could also be related to growth

NDR is a Requirement for Modern Security Defenses and the Agentic SOC Read More »

Anthropic’s Mythos Preview just changed the threat landscape in ways the security industry isn’t fully prepared for

Application Security, Artificial Intelligence, Cybersecurity, Security Operations Center (SOC) / /

The attacker’s blind spot just disappeared Today’s attackers largely treat software as a black box. Some study open-source software (OSS) to tailor their techniques, but doing this at scale has always been practically impossible which created a natural ceiling on adversarial precision. Mythos removes that ceiling entirely. Because frontier LLMs are trained on virtually all

Anthropic’s Mythos Preview just changed the threat landscape in ways the security industry isn’t fully prepared for Read More »

Lights-Out SOC? Yes, It’s Coming (and Faster Than You Think)

Artificial Intelligence, Cybersecurity, MSSPs, Security Operations Center (SOC), SOC / /

Recognized by Fast Company, TAG is a trusted next generation research and advisory company that utilizes an AI-powered SaaS platform to deliver on-demand insights, guidance, and recommendations to enterprise teams, government agencies, and commercial vendors in cybersecurity and artificial intelligence, Download TAG Analyst Report Is the human-augmented autonomous SOC a contrarian idea or the next

Lights-Out SOC? Yes, It’s Coming (and Faster Than You Think) Read More »

Hyperautomation for Security Teams

AI-driven security, Artificial Intelligence, Cybersecurity, EDR - Endpoint detection and response, EDR Alerts, Security Operations Center (SOC) / /

Six years ago, we founded DTonomy, a security automation company. As security software engineers and data scientists who had worked at the forefront of security operations — from building large-scale AI-based EDR systems to managing daily security operations — we were acutely aware of the challenges security teams face. Triaging security alerts during national holidays,

Hyperautomation for Security Teams Read More »

Fighting AI with AI: Tools for the Twenty-First Century

AI-driven security, Artificial Intelligence, Breach Detection, Cloud Security, Cyberattacks, Cybersecurity, Data Breaches, MSSP, Open XDR, Open XDR Platform, Security Operations Center (SOC) / /

In a recent conversation with a major educational institution’s CIO, the following circumstance arises: a university administrator is hiring for a position; of over 300 resumes that he receives, 95% of them look so similar that they could have come from the same person. And in a way, they did. With the proliferation of AI-powered

Fighting AI with AI: Tools for the Twenty-First Century Read More »

Unpacking the 2023 Top 250 MSSPs Report

Application Security, Cyberattacks, Cybersecurity, IT technology, MSSP, MSSPs, NDR, Network Security, Open XDR, Open XDR Platform, Security Operations Center (SOC), SOC, SOCless / /

Recently, MSSP Alert published its yearly report on the Top 250 MSSPs. The report is chock-full of interesting information from a survey of MSSPs that makes it a worthwhile read. Below are a few key takeaways that anyone working with an MSSP, looking to become an MSSP, or an MSP seeking out an MSSP partner

Unpacking the 2023 Top 250 MSSPs Report Read More »

Considering an XDR Purchase? Here Are Our Lessons Learned.

EDR - Endpoint detection and response, EDR Alerts, MSSP, NDR, Security Operations Center (SOC), SOC, XDR / /

Lessons learned from our search for, and integration of, our XDR Trusted Internet is now deploying Stellar Cyber XDR –as a SOC-monitored solution or as an Infrastructure as a Service. The marketing hype around XDR is deafening for those of you considering an XDR. It’s hard to sort through the slick websites and marketing noise

Considering an XDR Purchase? Here Are Our Lessons Learned. Read More »

Network traffic analysis

MSSP Alert Live Recap

Case Studies - MSSP, Cyberattacks, Cybersecurity, MSSP, Open XDR, Open XDR Platform, Security Operations Center (SOC), security technology, Webinars - Events Category, XDR / /

I’m sure, like most people reading this blog, the past two-plus years for me were mainly spent in front of my computer, talking with my colleagues, customers, and prospects over Zoom (or your video conferencing provider of choice). So when the opportunity to attend the MSSP Alert Live event in Washington, DC came my way, I hopped

MSSP Alert Live Recap Read More »

Next Gen SIEM

Economics Of Shift Left Security

Breach Detection, Cybersecurity, Data Breaches, Data Collection, Data Storage, Security Operations Center (SOC), security technology, SOC, SOCless / /

I’ve worked with dozens of SecOps and Detection and Response teams over the past few years and it has become crystal clear to me how important it is to fix as many security issues as possible upstream. Or as it is more commonly known, “Shift Left Security”. Broadly, I see three camps on “Shift Left Security”

Economics Of Shift Left Security Read More »

SIEM security

What is a Lean Security Team, and how to know if you are part of one

AI-driven security, Cybersecurity, Open XDR, Open XDR Platform, Security Operations Center (SOC), SOC, SOCless / /

Recently I wrote a blog about what makes a lean security team tick, however, after I posted, it occurred to me that I probably should have spent a few minutes talking about the different types of security teams we run into and how to determine if you fit into the lean security team category. You

What is a Lean Security Team, and how to know if you are part of one Read More »

SOC platform

Cybersecurity Infrastructure Needs a New Model

Compliment SIEM, Cyberattacks, Cybersecurity, EDR - Endpoint detection and response, EDR Alerts, MSSP, NDR, Network Security, Network Traffic Analysis, Open XDR, Open XDR Platform, Security Operations Center (SOC), SOC, SOCless / /

Cybersecurity systems are ripe for disruption. Over the years, individual tools have proliferated, each with its own data format, causing a deluge of disparate data. Also, there is a global shortage of skilled cybersecurity analysts who can evaluate that data (and they are very expensive if you can find them). Finally, and hackers are getting

Cybersecurity Infrastructure Needs a New Model Read More »

Network detection and response

Going SOCless

Cyberattacks, Cybercriminals, Cybersecurity, EDR Alerts, Machine Learning, NDR, Network Security, Network Traffic Analysis, Open XDR, Open XDR Platform, Ransomware attacks, Security Operations Center (SOC), SOCless / /

According to the FBI, the number of cyberattacks reported to their Cyber Division is up 400 percent compared to pre-pandemic levels, and attacks are getting worse. From financial sites to healthcare sites to government sites to supply chain industries, no one is safe from these attacks. The traditional defense against these threats is the Security

Going SOCless Read More »

Scroll to Top
Sign Up For Newsletters