Security Operations & Threat Intelligence
summary
Demonstration shows Google Security Operations with Gemini in Vertex AI tying into SOAR playbooks to group alerts by causality, produce an AI summary, and recommend mitigation actions. The demo surfaces two APT43 indicators, displays Sysmon output and a hash, and generates a pre-populated UDM search so an analyst can click to investigate. Playbook actions include stopping or cloning an instance, and the end-to-end flow runs successfully.
AI-written summary · about
chapters (4)
related talks
39mBye-Bye DIY: Frictionless Security Operations with Google
18mAI and Cybersecurity
45mAdvanced Security Operations with Elastic Security
49mFight Smarter: Accelerate Your SOC with AI Discovered Attacks
30mSOARing with Security Onion
44mAI Foundations: Mitigate Risks and Boost SOC Efficiency
30mLeveraging AI to Review and Strengthen Your Incident Response Plan: A Proof of Concept
01h 45mAI Engineering with the Google Gemini 2.5 Model Family