menu

Recent posts tagged soc

Level UI • 17 hours • in Articles • 9 min read
An MCP server is not a new API. It is a thin layer over the one you already have
Somewhere in the last year, "do we need an MCP server?" joined the list of questions that arrive in a brief before anyone has said what the thing is for. It is usually framed as MCP vs API, as though the Model Context Protocol were a newer kind of AP...
post-cover-33074
  • ai
  • api
  • webdev
  • security
7 Reactions 7 Comments
Tom Smithverified • Aug 20 • in Articles • 5 min read
Crogl's Monzy Merza: The SOC Agent That Refuses to Say It Can Replace You
Ask most AI SOC vendors what their agent does, and you'll hear some version of "faster investigations, fewer alerts." Ask Monzy Merza, and he'll walk you through a blast radius map instead — because for Crogl's customers, the real problem was never s...
post-cover-24945
  • soc
  • cybersecurity
  • aisecurity
  • devsecops
1 Reactions 0 Comments
Tom Smithverified • Aug 6 • in Articles • 4 min read
12 AI Agents Taught Themselves to Evade Your EDR. Most Security Teams Still Won't Trust AI to Triage
In March, according to Sophos, a ransomware actor spun up 12 separate AI agents and set them loose against copies of Sophos's own endpoint protection, CrowdStrike, and Microsoft Defender, running in parallel on separate virtual machines, testing and ...
post-cover-24228
  • agenticai
  • cybersecurity
  • soc
  • aisecurity
1 Reactions 2 Comments
Tom Smithverified • Jul 28 • in Articles • 3 min read
Torq SOC Brain: Why Reasoning From Precedent Beats Retrieving It
Most autonomous SOC vendors describe "self-learning" the same way. Pull up cases that resemble the one in front of you, hand them to an LLM, and let it summarize what happened last time. That's retrieval dressed up as intelligence. It's useful, but i...
post-cover-23464
  • cybersecurity
  • agenticai
  • soc
  • threatdetection
2 Reactions 1 Comments
himanshu.modi2021 • Apr 7 • in Articles • 4 min read
Ursnif Malware — Reconstructing a 6-Stage Infection Chain from a PCAP
date: 2026-03-20 description: A walkthrough of my first real malware PCAP investigation — how Ursnif used .avi file extensions to disguise DLL payloads, TLS C2 beaconing, and how I mapped the full attack to MITRE ATT&CK with Splunk detection rules. ...
post-cover-14178
  • dfir
  • networkforensics
  • wireshark
  • soc
2 Reactions 1 Comments
Tom Smithverified • Aug 11, 2025 • in Articles • 6 min read
Splunk's research shows defenders have the AI advantage—how to use LLMs for 150x faster analysis.
Why Defenders Have the AI Advantage And How to Keep It Splunk's Ryan Fetterman reveals how security teams can leverage LLMs to outpace attackers—and introduces The Threat Hunter's Cookbook While much of the cybersecurity industry frets about AI em...
post-cover-4589
  • threathunting
  • aisecurity
  • llms
  • soc
6 Reactions 1 Comments
To see more, click for the full list of posts or popular tags.
chevron_left
🔥 5 posts • 👩‍💻 2 active writers
✨ Want to write in this topic?
Share your learning. Get discovered. Build your profile.
Join CoderLegion
💡 Why developers use CoderLegion
Track learning • Share posts • Get ranked publicly
Create your profile