THREAT OPS › Threat News › Alert Zero: AI-driven alert triage and attack investigation for the agentic SOC
Alert Zero: AI-driven alert triage and attack investigation for the agentic SOC
<p>It's 9 a.m. Monday, the start of your shift.</p> <p>You begin the day like any other Monday: You open the queue, and the wall of alerts is already waiting. New alerts land between 9:05 and 9:10 a.m., while you close yesterday’s. You're already drowning, and you haven’t even had a chance to refill your coffee. You know that you won’t be able to get to things that really need prioritization. Thre
MITRE ATT&CK techniques
- ServerlessT1583.007
- ServerlessT1584.007
- ServerlessAML.T0008.004
Indicators of compromise
- https://cloud.elastic.co/serverless-registrationurl
- https://elasticstack.slack.com/archives/C018PDGK6JUurl