Machine Speed, Human Judgement: How AI Changed the SOC in 2026
A firsthand look inside the Cisco Live 2026 SOC and how AI, automation, and agentic workflows are transforming modern security operations.
All Blogs
Elevating Expertise in the SOC
At Cisco Live AMER 2026, Tier One SOC Analysts elevate their expertise by investigating further with Splunk Security and Endace.
Educate at Event Speed: Cisco Live Security Operations Center
At Cisco Live AMER 2026, the Cisco Event SOC turned live operations into education through SOC tours, speaker sessions, and World of Solutions conversations.
What Working the Cisco Live SOC Taught Me About AI, Detection, and Response
A product manager’s view from the Cisco Live SOC on using AI, Splunk ES, and XDR to investigate faster and build better detection and response products.
Cable to Cloud – A Product Engineer’s Journey Through the Cisco Live AMER 2026 SOC
A Cisco product engineer's first-time journey through the Cisco Live AMER 2026 Security Operations Center — from cabling the "SOC in a Box" on day one to teardown.
The Experience Dividend: How Better Digital Experience Protects Revenue, Trust, and Growth
Inside the Cisco Live Americas 2026 Agentic SOC, Cisco Security and Splunk Security used evidence-backed AI workflows, human validation, and integrated telemetry to protect, educate, and innovate.
AIM: Building an Agentic Tier-2 SOC Analyst at Cisco Live AMER 2026
An Agentic Incident Mate that triages a Cisco Extended Detection and Response (XDR) incident end-to-end across XDR, EndaceProbe, and Splunk Enterprise Security, and returns a Tier-2 report in minutes.
Building the Agentic SOC at Cisco Live Americas 2026
Inside the Cisco Live Americas 2026 Agentic SOC, Cisco Security and Splunk Security used evidence-backed AI workflows, human validation, and integrated telemetry to protect, educate, and innovate.
Is Your VPN Ready for the Quantum Era? – IPsec Series, Part 1
Quantum computers will break today's crypto. We introduce the two pillars of a secure handshake, key exchange and auth, and how each faces a different quantum threat: "harvest now, decrypt later" versus the slower risk to long-lived trust anchors.