Encrypted Visibility Engine: The Security Analyst’s New Superpower
Cisco Secure Firewall with Encrypted Visibility Engine protected Cisco Live Amsterdam. Learn about the latest innovations for the SOC of the Future.
Security Operations Center
How popular are AI tools like OpenClaw? Understanding AI usage across the network
During Cisco Live EMEA we noticed a variety of AI tools being used across the network. Let’s take a closer look at what tools were seen in the network traffic.
RAR Occasion: Unzipping an Attacker’s Playbook at Cisco Live Amsterdam
Cisco Live Amsterdam 2026 SOC detected, investigated, and neutralized a malicious file delivered via email—leveraging Cisco XDR, Splunk Attack Analyzer, Secure Malware Analytics, and Endace.
Innovating the SOC – Bridging Cisco XDR and Splunk EnterpriseSecurity at Cisco Live EMEA 2026
Cisco Live EMEA SOC team engineered a seamless, bidirectional integration between Cisco XDR and Splunk Enterprise Security, automating escalations and investigation workflows to eliminate friction, preserve context, and unify analyst collaboration
From Firehoses to Flutes – Mastering the Art of Drinking Our Own Champagne
Explore how layered defenses, deep integrations with Splunk and Endace, and real-time collaboration among experts transform Security Operations Centers into unified, resilient shields against emerging risks.
Cisco Live Amsterdam 2026: Enhancing Security Operations with Cisco Foundation AI (Reasoning)
Discover how Cisco Live EMEA SOC leveraged an innovative, integrated security architecture—featuring the new Cisco Security Foundation AI Reasoning model.
Cisco Live Amsterdam 2026: Using Agentic AI to shed light to SOC operations
Empowering SOC analysts with Agentic AI capabilities cansignificantly reduce mean-time-to-respond. The blog providesinsights into how we make this possible, with examples andstatistics.
From Flood to Focus: Finding Signal in an “Overflow Attempt” Alert Storm
Cisco XDR, Splunk, Cisco Secure Firewall, and Endace (Zeek) were used to investigate a spike in security alerts at Cisco Live EMEA, quickly distinguishing genuine threats from environmental noise through correlated incident analysis and network
Integrating With Cisco XDR at Black Hat Europe
Investigating indicators of compromise (IOCs) requires a unified view of security data. See how we integrated Cisco XDR with third-party tools and open-source models at Black Hat Europe.