Latest Articles

Evolving to Autonomous Defense: New Agentic SOC Capabilities
Security
4 Minute Read

Evolving to Autonomous Defense: New Agentic SOC Capabilities

Splunk is expanding its Agentic SOC Workforce with a set of new purpose-built skills, across detection, investigation, response, and governance.
The Agentic SOC Workforce: Defending at Machine Speed in the AI Era
Security
8 Minute Read

The Agentic SOC Workforce: Defending at Machine Speed in the AI Era

Why trusted autonomy is becoming the operating model for modern security operations.
MCP and the Agentic SOC: Governance, Speed, and Better Investigations
Security
8 Minute Read

MCP and the Agentic SOC: Governance, Speed, and Better Investigations

A CISO-focused strategic perspective on building trust, accountability, and speed into the Agentic SOC
Peeling Back the Layers: Inside Vidar - From Virtualized Code to Stolen Credentials
Security
15 Minute Read

Peeling Back the Layers: Inside Vidar - From Virtualized Code to Stolen Credentials

Explore how the Vidar info-stealer uses virtualized code, anti-analysis tactics, and sandbox evasion to hide its activity. Learn how to identify and detect Vidar in your environment using actionable Splunk TTPs and analytics.
Close AI Monitoring Blind Spots With OpenAI and Anthropic Add-Ons
Security
7 Minute Read

Close AI Monitoring Blind Spots With OpenAI and Anthropic Add-Ons

Splunk's new add-ons let teams track who used AI tools, what changed, and whether API keys were created or misused across ChatGPT, Claude, and other providers.
The Insider Threat That Doesn’t Sleep
Security
5 Minute Read

The Insider Threat That Doesn’t Sleep

These .conf26 sessions will guide practitioners through building ML-based detections, understanding AI agent risks, and applying these techniques to real attack scenarios.
Splunk Security Content for Threat Detection & Response: August Recap
Security
5 Minute Read

Splunk Security Content for Threat Detection & Response: August Recap

In August, the Splunk Threat Research Team had 2 releases of new security content.
Machine Speed, Human Judgment: Inside the Cisco Live Agentic SOC
Security
9 Minute Read

Machine Speed, Human Judgment: Inside the Cisco Live Agentic SOC

At Cisco Live Americas 2026, Cisco Security and Splunk Security built an Agentic SOC where AI-assisted workflows accelerated triage, Splunk Enterprise Security grounded investigations in evidence, and analysts remained in control.
From Live Event Telemetry to Action: Lessons from the 10th RSAC SOC
Security
7 Minute Read

From Live Event Telemetry to Action: Lessons from the 10th RSAC SOC

At RSAC 2026, Cisco Security and Splunk Security supported the 10th year of the SOC.