Cisco Live Amsterdam 2026: Enhancing Security Operations with Cisco Foundation AI (Reasoning)
Discover how Cisco Live EMEA SOC leveraged an innovative, integrated security architecture—featuring the new Cisco Security Foundation AI Reasoning model.
Splunk Enterprise Security
Cisco Live Amsterdam 2026: Using Agentic AI to shed light to SOC operations
Empowering SOC analysts with Agentic AI capabilities cansignificantly reduce mean-time-to-respond. The blog providesinsights into how we make this possible, with examples andstatistics.
From Flood to Focus: Finding Signal in an “Overflow Attempt” Alert Storm
Cisco XDR, Splunk, Cisco Secure Firewall, and Endace (Zeek) were used to investigate a spike in security alerts at Cisco Live EMEA, quickly distinguishing genuine threats from environmental noise through correlated incident analysis and network
Lessons Learned from Securing the World’s Largest Cyber Events
Announcing the launch of the Cisco Event SOCs website and the release of our comprehensive Reference Architecture & Operations Guide.
A Newbie’s Perspective: From Curiosity to Confidence, My SOC Story
A new analyst shares their Cisco Live SOC experience, covering quick onboarding, using Cisco XDR and Endace for incident investigation, and building confidence in threat response.
Have You Seen My Domain Controller?
Windows clients expose Active Directory DNS queries on public Wi-Fi, risking OSINT and credential leaks. Learn from Cisco Live SOC observations how to protect clients with VPNs .
Splunk in Action: From SPL to PCAP
Learn how Cisco Live SOC uses Splunk SPL and Endace PCAP to investigate exposed HTTP authentication and Kerberos activity, securing sensitive data on public Wi-Fi networks.
Cisco Live Melbourne 2025 SOC
Cisco Security and Splunk protected Cisco Live Melbourne 2025 in the Security Operations Centre. Learn about the latest innovations for the SOC of the Future.
Cisco Live Melbourne Case Study: Cisco Live TMC Experience and DDoS
Explore a Cisco TME's experience in the Cisco Live SOC, detailing efficient onboarding, incident escalation, and a real-world DDoS attack investigation and response.