
AI in the SOC: A Practical Plan for Analyst Collaboration

yankee0one
A phased approach to AI-assisted security operations, with defined responsibilities, research limitations, and measures for evaluating a pilot.

Dive into the digital battleground with analysis of cyber threats, defensive strategies, and emerging technologies in cybersecurity.


yankee0one
A phased approach to AI-assisted security operations, with defined responsibilities, research limitations, and measures for evaluating a pilot.

How incident leaders can make decisions with incomplete evidence, coordinate responders, and communicate what is known during a cyber crisis.
Read more
How people can use generative AI to explore ideas and analyze security problems while keeping evidence and judgment in the process.
Read more
A proposed four-person response drill that assigns endpoint, network, identity, and coordination work when an incident is validated.
Read more
A 2025 perspective on AI-assisted attacks, identity compromise, API exposure, and the operational work needed to contain and recover from intrusions.
Read more
How supply-chain compromise, data theft, API weaknesses, and abuse of legitimate tools affect security planning beyond ransomware recovery.
Read more