Cisco Unveils AI-Powered Security Analyst for Tier-1 and Tier-2 SOC Investigators

Cisco's Instant Attack Verification is an AI-powered security analyst designed to help Tier-1 and Tier-2 SOC investigators manage the overwhelming number of alerts they receive. The system uses agentic AI, which means it works alongside human analysts rather than replacing them.

Instant Attack Verification can triage incoming detections, filtering out false positives and prioritizing real threats. It also conducts deeper investigations, correlating evidence from various sources and reconstructing a timeline of events to determine the scope and impact of an attack.

The system's goal is to achieve 100x scalability, quality, and speed in security operations by pairing human expertise with AI rather than replacing it. To measure its success, Cisco focuses on three key metrics: trust earned through measured accuracy and explainability, resilience against adversaries, and thoughtful human oversight.