SOURCE-LINKED INTELLIGENCE
It is Not Yet Another Tool: Creating and Deploying an Agentic AI Companion in a Security Operations Center
Security Operations Centers (SOCs) process large amounts of tickets, most of which are low-interest events not worthy of further investigation. The repetitive nature of this task and similarity of the vast amounts of tickets make it a prime candidate for generative AI-based automation. We created and deployed an agentic AI companion utilizing large language models through fieldwork within a SOC for over one year. The design of the SOC AI companion was driven by researchers' participation and interactions within the SOC's daily work. SOC analysts were invited to use it during the last four mont
Read original source ↗ Open in workspace
- recordType
- paper
- region
- Global
Evidence & attribution
- arXiv · AI, language, vision and robotics · 2026-09-05T20:29:42.000Z
First collected: 2026-09-20T21:32:07.623Z. This is not the publication date.