Author: Andreas Zacharakis

When a display adapts itself to help an analyst, it seems obvious that more intelligent adaptivity should help more. In SYMBIOTIK’s second SOC use case we set out to test that assumption and found something more useful than a confirmation. We showed thirteen participants 48 cyber threat intelligence graphs (624 trials in total) and asked …

Read more “One well-aimed adaptation beats four badly-aimed ones”

Modern Security Operations Centres (SOCs) can get overloaded with information. Analysts face tens of thousands of daily alerts, fragmented across SIEM, IDS, EDR, and CTI platforms. The vast majority of these alerts are false positives but hidden among them are genuine threats that demand immediate action. This massive discrepancy between false positives and real threats …

Read more “From Detection to Decision: How LLMs Enable Autonomous SOC Workflows”