The D3 Blog
Learn about the latest from D3 and the world of cybersecurity, with news, analysis, and more.
-
The 10 Best Splunk SOAR Alternatives in 2026: Compared Before the Python Playbook Migration
Splunk SOAR drops Python 3.9 in September 2026, and every playbook gets touched. 10 alternatives compared by architecture, audit model, and pricing behavior, plus the…
-
The 10 Best Tines Alternatives in 2026: Agentic SOC Platforms Compared After the 3B Launch
Researching Tines alternatives? 10 platforms compared for security teams after the Tines 3B launch, plus the one question that separates every option: who writes the…
-
The Best Agentic SOC for CrowdStrike in 2026 (and Where Charlotte AI Fits)
The 8 best agentic SOC platforms for CrowdStrike Falcon in 2026, compared. What Charlotte AI’s agents do today, how credits work, and where the gap…
Filter by category:
Search blog:
-
Agentic SOC, Autonomous SOCThe 3 a.m. Question: Who’s Liable When Your AI Acts Alone?
When your AI acts in the SOC at 3 a.m., liability stays with you. Here’s how to prove what it did and defend autonomy in…
-
Agentic SOC, Autonomous SOCThe Story of an Alert, in 8 Stages You Can Prove
Investigating every alert at L2 depth is an engineering problem. Here is the 8-stage lifecycle behind it: autonomous at every stage, governed at every stage.
-
Agentic SOC, Autonomous SOCWhat a Governed Agentic SOC Does When It Can’t Be Sure
The most useful moment in an agentic SOC demo is the failure path, not the clean verdict. Here’s what to ask to see, and what…
-
Agentic SOC, SOAR100 Wrong Verdicts a Day: The Fine Print Inside a “99% Accurate” AI SOC
LLMs perform pattern completion over whatever context they’re given. Why AI triage reads missing evidence as benign, and the guardrail that prevents it.
-
Agentic SOC, Autonomous SOCWhat Good Looks Like in an Agentic SOC (and the Five Questions That Prove It)
Every agentic SOC demos well. Here’s what separates production-ready from a demo: an eight-stage lifecycle and five questions any buyer can ask any vendor.
-
Agentic SOC, Autonomous SOCYour Analysts Don’t Have an Alert Problem. They Have a Story Problem.
An alert is a symptom, not an explanation. The real SOC bottleneck is turning signals into the story of what happened. That is the job…
-
Autonomous SOCFour Years on ServiceNow SOAR Taught One Global 1000 SOC Exactly What to Look For
A Global 1000 SOC spent four years on ServiceNow SOAR. That experience became a checklist for modern alert triage. See what they learned to look…
-
Autonomous SOCPalo Alto Says XSOAR’s Successor Is a Rebuild. That Makes the Destination Your Call.
Cortex AgentiX is XSOAR’s named successor, and reaching it means a migration. See how to migrate off XSOAR without re-platforming your SIEM.
-
Agentic SOC, Autonomous SOCThe Most Dangerous Answer in the SOC Is a Confident One
Accuracy on a good day is the wrong measure of an AI SOC. What matters is what it does when it doesn’t know, and why…