Stories from the SOC - The case for human response actions

Stories from the SOC is a blog series that describes recent real-world security incident investigations conducted and reported by the AT&T SOC analyst team for AT&T Managed Extended Detection and Response customers.

Executive summary

As we move towards more automation, we should remember the risk of over-automating, or at least make a conscious decision to accept the risks. This is especially important in automating response actions, which left unchecked could wreak havoc with day-to-day business operations.

Investigation

The alarm

One …

accept actions amp analyst automation blog case customers decision detection detection and response executive extended detection extended detection and response human important incident investigations managed managed extended detection and response response risk risks security security incident series soc soc analyst stories team world