The D3 Blog
Learn about the latest from D3 and the world of cybersecurity, with news, analysis, and more.
-
What Good Looks Like in an Agentic SOC (and the Five Questions That Prove It)
Every agentic SOC demos well. Here’s what separates production-ready from a demo: an eight-stage lifecycle and five questions any buyer can ask any vendor.
-
Your Analysts Don’t Have an Alert Problem. They Have a Story Problem.
An alert is a symptom, not an explanation. The real SOC bottleneck is turning signals into the story of what happened. That is the job…
-
Four Years on ServiceNow SOAR Taught One Global 1000 SOC Exactly What to Look For
A Global 1000 SOC spent four years on ServiceNow SOAR. That experience became a checklist for modern alert triage. See what they learned to look…
Filter by category:
Search blog:
-
Autonomous SOCWhat Good Looks Like in an Agentic SOC (and the Five Questions That Prove It)
Every agentic SOC demos well. Here’s what separates production-ready from a demo: an eight-stage lifecycle and five questions any buyer can ask any vendor.
-
Autonomous SOCYour Analysts Don’t Have an Alert Problem. They Have a Story Problem.
An alert is a symptom, not an explanation. The real SOC bottleneck is turning signals into the story of what happened. That is the job…
-
Autonomous SOCFour Years on ServiceNow SOAR Taught One Global 1000 SOC Exactly What to Look For
A Global 1000 SOC spent four years on ServiceNow SOAR. That experience became a checklist for modern alert triage. See what they learned to look…
-
Autonomous SOCPalo Alto Says XSOAR’s Successor Is a Rebuild. That Makes the Destination Your Call.
Cortex AgentiX is XSOAR’s named successor, and reaching it means a migration. See how to migrate off XSOAR without re-platforming your SIEM.
-
Autonomous SOCThe Most Dangerous Answer in the SOC Is a Confident One
Accuracy on a good day is the wrong measure of an AI SOC. What matters is what it does when it doesn’t know, and why…
-
Autonomous SOCDesigning an AI SOC That Fails Toward a Human
Fail-open is a design principle: when an AI SOC can’t reach a reliable conclusion, it defaults to human review. Here’s the architecture.
-
Compliance, IndustryNIS2, Sovereignty, and Automation: Inside Germany’s SOC Market with Johannes Kresse
Johannes Kresse on NIS2 compliance, AI adoption, and data sovereignty reshaping German SOCs, plus the SOC map bringing transparency to Germany’s MSSP market.
-
Autonomous SOCDoes “AI SOC” Solve Alert Fatigue?
40% of alerts never get investigated. See how an accountable agentic AI SOC delivers full coverage with Attack Path Discovery and Adaptive Tasking.
-
Autonomous SOCThe Playbook Estate Problem: When Your SOAR Needs a Full-Time Owner
Year one with a playbook SOAR is exciting. Year three, an engineer owns it full-time. The agentic SOC question nobody budgets for at renewal.