Microsoft Rebuilds the SOC with AI Agents, SIEM Integration and Machine-Speed Defense

Cyberattacks can move faster than a security team can investigate them. Attackers increasingly use AI agents to automate steps that once needed several people, while defenders still work across separate monitoring and protection tools. Microsoft says this mismatch is driving a rethink of how security operations centers, or SOCs, should work. This is not a newly discovered malware strain or a documented intrusion. Attacks can scale while defenders lose time moving between systems. Reporting on AI-driven attacks and fraud shows how automation can accelerate intrusions and other abuses, although Microsoft identifies no specific campaign. Microsoft security leaders described an integrated security operations center, called ISOC, in...

Läs hela artikeln hos källan.