Elevating Expertise in the SOC
Cisco, Tuesday, July 7th, 2026
A Cisco SOC analyst explains how AI-assisted tools turned newly hired junior analysts into capable incident investigators.
Erik Dove, a Tier Two SOC Analyst, describes how newly hired analysts with minimal experience were trained to investigate security incidents at Cisco Live Americas 2026 using AI-assisted tools.
The article walks through the investigation workflow, showing how analysts pivot from Splunk Security alerts to Endace packet capture to uncover root causes.
Using visualization tools like conversation chords and Wireshark, the new team successfully handled 187 incidents from nearly 200TB of captured network data.