What Working the Cisco Live SOC Taught Me About AI, Detection, and Response
Cisco, Tuesday, July 7th, 2026
A Cisco Splunk product manager shares lessons from investigating live detections in the Cisco Live SOC.
Logan Buntrock, a product manager at Cisco Splunk, shares insights from working in the live Security Operations Center at Cisco Live AMER 2026.
He describes how AI, Splunk Enterprise Security, and XDR tools helped him investigate real detections and reach evidence-backed conclusions.
The article emphasizes that effective threat investigation is fundamentally a workflow problem requiring integrated tools and analyst judgment rather than isolated solutions.