Ep163: Operationalizing the AI-powered SOC - What it Takes to Make AI Work

Arctic Wolf's Dean Teffer reveals how they transformed security operations by processing one trillion daily alerts with AI, and shares hard-won lessons from operationalizing AI in production SOC environments Topics Include:Arctic Wolf processes one trillion security alerts daily across 10,000 global customersSecurity operations remained stubbornly human-mediated due to constantly evolving threats and infrastructure complexityDean explains why platformizing data creates a virtuous cycle enabling AI automationTraditional ML models couldn't handle SOC's situational complexity, leading to LLM adoptionArctic Wolf's unique advantage: direct access to 1000+ SOC analysts for continuous feedbackAWS partnership began with governance concerns about data privacy and model training"Centaur Chess" approach: AI-human teams consistently outperform either alone in cybersecurityThree-generation AI evolution: from personal use to prompt engineering to expert-tuned modelsThree-day AWS hackathon achieved breakthroughs that would've taken months independentlySOC analysts actively shaped AI responses through iterative feedback during live operationsObservability proved critical: tracking performance, quality metrics, and response times for continuous improvementMeasurable impact achieved: automated alert orientation dramatically increased analyst efficiency and response quality Participants:Dean Teffer - VP of AI/ML, Arctic WolfAswin Vasudevan - Senior ISV Solution Architect, Amazon Web ServicesSee how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/

There are no comments yet.

Please log in to write the first comment.