THREATOPS
THREAT OPSThreat News › Inside Elastic InfoSec's agentic SOC: When to inline your agent's skills for a 5× cost reduction

Inside Elastic InfoSec's agentic SOC: When to inline your agent's skills for a 5× cost reduction

medelastic_securityPublished 2026-07-24

<p>This is Part 2 of the <strong>Inside Elastic InfoSec's Agentic SOC</strong> series. <a href="https://www.elastic.co/security-labs/alert-triage-agentic-soc-elastic-workflows">Part 1: How we triage every alert before an analyst opens it</a>. <a href="https://www.elastic.co/security-labs/ai-agent-optimization-production-scale">Part 3: how we cut AI agent LLM calls by 60%</a>.</p> <p>Investigating

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://www.elastic.co/security-labs/agentic-soc-token-budget-architecture