The GenAI D&R Revolution Begins - by Jack Naglieri
Welcome to Detection at Scale, a weekly newsletter for SecOps practitioners covering detection engineering, cloud infrastructure, the latest vulns/breaches, and more. We are back after the madness of the RSA and BSides conferences. Enjoy! Unsurprisingly, RSA Conference 2024 was brimming with security companies championing AI. In Detection and Response tooling, new categories of features are emerging to simplify the tasks of SecOps teams, including automated triage, chatbots, and log summarization, to name a few. This post will explore these nascent categories, explain their role in enhancing team performance, and speculate future direction. We will not cover AI security copilots like Charlotte AI from CrowdStrike and Security Copilot from Microsoft. If SOARs were a response to loud SIEMs, then “Autonomous SOC Analysts” would be their successors. The idea behind an autonomous SOC analyst is to perform automated end-to-end alert triage and analysis. This works by receiving the alert from
Welcome to Detection at Scale, a weekly newsletter for SecOps practitioners covering detection engineering, cloud infrastructure, the latest vulns/breaches, and more. We are back after the madness of the RSA and BSides conferences. Enjoy! Unsurprisingly, RSA Conference 2024 was brimming with security companies championing AI. In Detection and Response tooling, new categories of features are emerging to simplify the tasks of SecOps teams, including automated triage, chatbots, and log summarization, to name a few. This post will explore these nascent categories, explain their role in…
related reading
- The End-State Fallacy: Where Is AI Security Headed?endstatefallacy.com
- Security incident disclosure — July 2026huggingface.co
- The Future of SOC Automation Platformssoftwareanalyst.substack.com
- SoundBytes - ScaleUp:AIscaleup.events
- Generative AI's Act o1: The Reasoning Era Begins | Sequoia Capitalsequoiacap.com
- Automated Incident Response: Streamlining Your SecOps | Prophet Securityprophet.security
- How ai will impact cybersecurity: the beginning of fifth-gen siemsumologic.com
- Fundamentals to Security Alert Automation: SOAR Your Own Way | by Ryan G. Cox | Mediummedium.com
- Reducing SIEM Alert Fatigue in 2026: How Tuning Improves Detection (Even with AI)redlegg.com
- Defining A Software Supply Chain Security Platform & Exploring New Techniques, Part 2softwareanalyst.substack.com
- A Deep Dive Into The Cloud & Application Security Ecosystemsoftwareanalyst.substack.com
- No Vendor Consolidation In The SOC - by SACRsoftwareanalyst.substack.com