I am a Security Engineer at a major media company. My work covers everything Detection and Response, from SIEM and SOAR to custom tooling. This blog will cover everything I've learned, from an engineer to others.
1 story
The cybersecurity industry is moving toward AI agents in the SOC. But is that the right direction? As AI improves, deterministic capabilities will matter more than ever. And an effective AI strategy involves knowing when not to use it as much as how to use it.
Alert floods put Detection and Response under pressure when we need it most. Queueing theory gives us practical ways to reduce work, increase throughput, preserve critical capacity, and recover without creating another flood.
Featured
The cybersecurity industry is moving toward AI agents in the SOC. But is that the right direction? As AI improves, deterministic capabilities will matter more than ever. And an effective AI strategy involves knowing when not to use it as much as how to use it.