THREAT OPS › Threat News › Inside Elastic InfoSec's agentic SOC: cutting alert triage from 30 minutes to under 3
Inside Elastic InfoSec's agentic SOC: cutting alert triage from 30 minutes to under 3
<p>This is Part 1 of the Inside Elastic InfoSec's Agentic SOC series. <a href="https://www.elastic.co/security-labs/agentic-soc-token-budget-architecture">Part 2: choosing the right agent architecture for a 5× cost reduction</a>. <a href="https://www.elastic.co/security-labs/ai-agent-optimization-production-scale">Part 3: how we cut AI agent LLM calls by 60%</a></p> <p>Elastic's InfoSec team built
MITRE ATT&CK techniques
- Cloud AccountT1087.004
- Cloud AccountT1136.003
- System PromptAML.T0069.002
Indicators of compromise
- https://discuss.elastic.co/c/securityurl