THREAT OPS › Threat News › Inside Elastic InfoSec's agentic SOC: cutting alert triage from 30 minutes to under 3
Inside Elastic InfoSec's agentic SOC: cutting alert triage from 30 minutes to under 3
<p>This is Part 1 of the Inside Elastic InfoSec's Agentic SOC series. <a href="https://www.elastic.co/security-labs/agentic-soc-token-budget-architecture">Part 2: choosing the right agent architecture for a 5× cost reduction</a></p> <p>Elastic's InfoSec team built an agentic SOC that triages every alert before an analyst opens it. A 30-minute manual investigation now finishes in under 3 minutes: d
MITRE ATT&CK techniques
- Cloud AccountT1087.004
- Cloud AccountT1136.003
- System PromptAML.T0069.002
Indicators of compromise
- https://discuss.elastic.co/c/securityurl