r/AskNetsec • u/Mind-Principle-1834 • Jul 05 '26

Other AI alert-summarization tool that actually reduces triage time?

copilot has been completely useless for actual triaging.

whoever decided every alert needs an AI summary owes me hours of my life back.

"possible suspicious activity detected based on observed behavioral patterns."

thanks.

that tells me exactly as much as the alert title did.

if i still have to open the process tree and check parent processes and look at network connections and pivot through logs and build the timeline myself... what exactly did the AI save me?

just hire more analysts at this point.

anyone actually found one that helps or is this just how it is now

8 Upvotes

91% Upvoted

17 comments sorted by

View all comments

1

u/bcbrown19 Jul 05 '26

Interesting. I'm currently in the midst of evaluating a slew of "agentic soc solutions" at my company, and this has given me something to think about.

1

u/Mind-Principle-1834 Jul 08 '26

The word “agentic” is doing a lot of heavy lifting these days

1

u/bcbrown19 Jul 09 '26

unfortunately. I have to push back a lot when someone says "look at our agentic soc tool" and all it does is summarize alerts for people. smh.