Black Hat USA 2026: Building the Agentic SOC, One Live Event at a Time
Cisco is the Security Cloud Provider for the Black Hat conferences. Learn about the latest innovations for the Agentic SOC.
Black Hat
Thrown into the SOC: A Black Hat First-Timer’s Story
A Black Hat SOC analyst shares how agentic workflows, Splunk ES, packet evidence, and human mentorship accelerated triage & investigation in the NOC/SOC.
Troubleshooting Wi-Fi at Black Hat USA 2026 with ThousandEyes
A behind-the-scenes look at troubleshooting Wi-Fi in the Black Hat USA 2026 Network Operations Center with ThousandEyes.
Distributed Latency Monitoring at Black Hat
Learn how the Black Hat NOC/SOC used ThousandEyes, Linux command-line testing, and packet evidence to monitor distributed latency, isolate DNS issues, and validate network performance during a live cybersecurity event.
Building a Risk-Based Secure Network Analytics Detection with Splunk Detection Editor (Alpha)
At Black Hat USA, we used Splunk Detection Editor Alpha to turn Cisco SNA alarms into risk events with context, drilldowns & analyst-ready investigation paths.
Black Hat USA 2026: Safeguarding DNS with Secure Access
Cisco is the Security Cloud Provider for the Black Hat conferences, over a decade providing DNS Security. Learn about protecting DNS with Secure Access.
Uplevelling Black Hat Threat Hunters
Once you ingest major telemetry sources, how can we add value for our Threat Hunters? Check out how we brought in potentially malicious sandbox submissions to the analysts’ queue for triage.
Defenseclaw for On-Prem AI SOC Workflow at Black Hat Asia
At Black Hat Asia, we tested a private AI SOC workflow built with Ollama, NVIDIA GPU acceleration, Open WebUI, OpenClaw, DefenseClaw, Cisco AI Defense and MCP integrations, with Splunk audit visibility.
Cisco Secure Access with MCP Infrastructure at Black Hat Asia 2026
Cisco Secure Access provides the DNS resolution and security at Black Hat Asia.