Chasing AMMYY at Splunk .conf
Discover how Cisco's Encrypted Visibility Engine (EVE) and Endace PCAP uncovered Flawed AMMYY RAT traffic at Splunk .conf without breaking TLS encryption.
Security Operations Center
Admin in the Loop: Firewalls and the Agentic SOC
Discover how Cisco Secure Firewall and Cloud Control stream structured Snort 3 and EVE telemetry into Splunk ES to power the .conf26 Agentic SOC pipeline.
The Zero-Day Blind Spot: Why Your Agentic SOC needs Retrospective Packet Replay
Learn how the .conf26 Agentic SOC paired Endace full PCAP with Cisco Secure Firewall and Talos rules to retrospectively replay wire data against zero-days.
One Cisco in Action: Inside the Agentic SOC at .conf26
Read how Cisco Cloud Control and Splunk Enterprise Security powered the live Agentic SOC at .conf26 to deliver unified TDIR across live event traffic.
Splunk .conf26: Tracking the Triage Agent in the Agentic SOC
How Cisco used Splunk as the SOC data platform at .conf26 to unify security telemetry and track the Splunk AI Triage Agent with human-validated workflows.
Black Hat USA 2026: Building the Agentic SOC, One Live Event at a Time
Cisco is the Security Cloud Provider for the Black Hat conferences. Learn about the latest innovations for the Agentic SOC.
Thrown into the SOC: A Black Hat First-Timer’s Story
A Black Hat SOC analyst shares how agentic workflows, Splunk ES, packet evidence, and human mentorship accelerated triage & investigation in the NOC/SOC.
Troubleshooting Wi-Fi at Black Hat USA 2026 with ThousandEyes
A behind-the-scenes look at troubleshooting Wi-Fi in the Black Hat USA 2026 Network Operations Center with ThousandEyes.
Building a Risk-Based Secure Network Analytics Detection with Splunk Detection Editor (Alpha)
At Black Hat USA, we used Splunk Detection Editor Alpha to turn Cisco SNA alarms into risk events with context, drilldowns & analyst-ready investigation paths.