THREATOPS
THREAT OPSThreat News › Inside Elastic's agentic SOC: How we took AI alert triage from 60% to 92% accuracy

Inside Elastic's agentic SOC: How we took AI alert triage from 60% to 92% accuracy

medelastic_securityPublished 2026-08-25

<p>AI verdict correctness in our security operations center (SOC) is 92%, up from 60%, but we didn't switch models to get there. What we changed is the context the agents get before they decide anything, including the detection rule's investigation guide and user risk data from Workday, along with the closure reasons from 30 days of past cases on that same rule.</p> <p>This post covers how the age

Indicators of compromise

Original source: https://www.elastic.co/security-labs/alert-triage-agentic-soc-self-correcting-agents