One Cisco in Action: Inside the Agentic SOC at .conf26
Cisco, Thursday, October 8th, 2026
Cisco recaps the live agentic SOC it ran with Splunk, Endace and Jamf to protect the Splunk .conf26 event network.
Cisco describes the Agentic Security Operations Center it deployed on the Splunk .conf26 Pavilion floor after earlier testing at Black Hat USA, protecting attendees, exhibitors and venue network segments.
The live SOC used Cisco Cloud Control, Splunk Enterprise Security, Cisco Security telemetry, Talos intelligence and Endace continuous packet capture, with a joint Cisco, Splunk, Endace and Jamf team demonstrating multi-agent threat detection, investigation and response at scale.
The core challenge was distinguishing malice from benign anomalies such as training labs and exploit demos without disrupting attendees.