#SOC
All CosmicBytez Labs articles tagged #SOC, across news, security advisories, how-to guides, and projects.
- News
The SOC Doesn't Need to Start Over With Every Alert: AI Is Cutting Attacker Retry Time to Minutes
AI now resolves failed attack attempts in minutes instead of hours, and Conifers.ai argues SOCs need shared operational memory to keep pace.
- News
DORA Year Two: Can Your SOC Actually See the Attack?
As DORA enters year two, EU financial entities face a harder test: proving their SOC has enough visibility to detect and scope live intrusions.
- News
When the Whole Company Adopts AI: What It Does to Your SOC
AI-linked SOC alerts are still under 1% of total volume but grew 685% since February 2026 — and 94% of it is noise, not attacks.
- Project
TheHive: Self-Hosted Incident Response Case Management
Build a production-grade security incident response platform using TheHive 5, Cassandra, Elasticsearch, and MinIO — then integrate it with Wazuh alerts...
- News
From Assistive to Agentic: The AI Shift That's Redefining Threat Management
Enterprise security teams are sitting on 40+ tools generating overlapping alerts, yet breach dwell times remain stubbornly high. Agentic AI is changing...
- News
Only 10% of SOCs Say They're Getting Excellent Value From AI — What the Second Wave Must Deliver
A new survey reveals only 10% of Security Operations Centers report getting excellent value from AI investments. As billions flow into AI-powered security…
- News
Beyond Assume-Breach: How AI-Native Security Will Reshape Enterprise Defense
Twenty years after Dark Reading launched, security leaders are looking beyond the assume-breach paradigm toward AI-native, hyper-segmented enterprise defense…
- News
Exaforce Raises $125 Million for Agentic SOC Platform
Cybersecurity startup Exaforce has closed a $125 million funding round, bringing total investment to $200 million, as the company scales its AI...
- News
One Missed Threat Per Week: What 25M Alerts Reveal About
Analysis of more than 25 million security alerts across enterprise SOCs reveals a troubling pattern: organizations are institutionalizing the practice of...
- News
In Other News: Scattered Spider Member Arrested, SOC
A Scattered Spider threat actor has been arrested, a vulnerability in an NSA tool is disclosed, SOC effectiveness metrics get a rethink, and OFAC...
- HOWTO
How to Configure Microsoft Sentinel Analytics Rules
End-to-end SOC guide for Microsoft Sentinel: build KQL-based scheduled and NRT analytics rules, wire automation rules for incident triage, and deploy...
- News
Gartner Identifies the Top 6 Cybersecurity Trends Reshaping
Agentic AI oversight, post-quantum migration, AI-driven SOCs, and regulatory volatility lead Gartner's annual cybersecurity trend forecast as the threat...
- Checklist
Incident Response Checklist
Step-by-step incident response checklist following NIST SP 800-61 framework. Covers preparation, detection, containment, eradication, recovery, and...
- HOWTO
Python for Security Automation: Essential Scripting
Learn Python security scripting fundamentals including network scanning, log parsing, hash analysis, API integration, and automated threat detection for...