AI SOC - real or hype?
AI SOC feels like a distraction at best.
Not because the tech isn't legit, it is. But most SOC environments I scope have half configured log sources, parsers not touched in a year, non existent alert tuning.
You don't have clear enough data for AI to do anything useful. garbage in and garbage out.
Fix your signal quality first then talk about AI.
Anyone actually solving for data quality before bolting on AI? or everyone's skipping to the demo?
u/Interesting_Rule_230 — 12 days ago