Archive - Detection at Scale

Architecting Your Detection Strategy for Speed and Context

A practical guide to building security monitoring that balances speed with context while optimizing costs and reducing false positives.

Aug 18 •

July 2025

D@S Podcast S3 Ep#63 - Why Your SOC Isn't Ready for AI (And How to Fix It)

Illumio's Erik Bloch argues that chasing shiny AI tools without solid fundamentals is like building a house on sand—and he's got the data to prove it.

Jul 22 •

47:49

D@S Podcast #62 - Training Analysts When AI Does the Investigating

SANS Institute's John Hubbard predicts the future SOC analyst won't investigate alerts, but will instead manage the AI agent army that does.

Jul 15 •

30:04

June 2025

The Cursor Moment for Security Operations

How Model Context Protocol and AI coding agents are enabling the next evolution of detection engineering

Jun 16 •

May 2025

The Agentic SOC: From Isolated Automation to Orchestrated Intelligence

Why the future of security isn't one super-agent but a coordinated ecosystem that amplifies human expertise.

May 27 •

Securing MCP: 5 Safeguards for Enterprise Teams

Protecting Model Context Protocol (MCP) AI Applications

May 5 •

April 2025

How AI Agents Transform Alert Triage

Compressing the critical time gap between alert generation and meaningful action

Apr 22 •

MCP: Building Your SecOps AI Ecosystem

How the open Model Context Protocol creates new possibilities for connecting AI with enterprise security tools.

Apr 2 •

March 2025

The AI-Powered Detection Engineer

Transforming Security Monitoring with Code-First Detection Logic and Intelligent AI Automation

Mar 10 •

Teaching Security AI Agents to Navigate Your Organization

Learning your organization's security patterns that evolve with your business

Mar 4 •

February 2025

D@S #56: Building Security for Rabbit's AI-powered Hardware

Matthew Domko explains how his team tackles securing a consumer AI device that can take real-world actions, requiring expertise across hardware…

Feb 27 •

Investigative AI Agents: Saving Time during Triage and Analysis

How AI assistants leverage SIEM foundations to automate tedious workflows and amplify human expertise

Feb 26 •

#nojs-banner { position: fixed; bottom: 0; left: 0; padding: 16px 16px 16px 32px; width: 100%; box-sizing: border-box; background: red; color: white; font-family: -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; line-height: 13px; } #nojs-banner a { color: inherit; text-decoration: underline; } This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts