Скачать или смотреть (TR12) (INCYBER) SOC automation: how far do we go?

The growing trend toward automating Security Operations Centers (SOCs) raises fundamental questions about how far it should go and what role artificial intelligence should play within SOC solutions, including Security Information and Event Management (SIEM) systems, User and Entity Behavior Analytics (UEBA), and Security Orchestration, Automation and Response (SOAR) tools. This technological revolution calls for a radical rethink of the organizational structures and skills required to maintain robust cybersecurity. However, one key question remains: what role should humans play in this automated ecosystem? While AI can speed up threat detection and incident response, is human expertise still irreplaceable for interpreting, anticipating, and making ethical decisions?