From Threat Intel to the SOC: How AI Is Accelerating Both Sides of the Fight

Thursday, June 18th at 2:00 PM EDT

Attackers are not just experimenting with AI anymore. Underground marketplaces now offer subscription-based tools built specifically to remove every guardrail that keeps commercial models in check, and nation-state groups are using them to scale phishing, generate polymorphic malware, and run operations that once required senior technical talent. In this ThreatTalk, our threat intelligence team opens with a look at how this threat has industrialized and what it actually looks like in active campaigns.

But knowing how attackers use AI is only half the picture. Our threat hunters walk through real cases to show how they are using the same capabilities on the defensive side: cutting manual research time, surfacing connections across campaigns and threat actors, and building sharper hypotheses faster. You will see how AI changes the pace of an investigation, not just the output.

We will close in the SOC, where an analyst walks through a live investigation to show how AI delivers verdict-ready, context-rich findings that let analysts act faster and with more confidence. Less time chasing noise. More time stopping attackers before they dig in.
What you'll learn

• How attackers have industrialized AI through underground tooling, polymorphic malware, and AI-assisted offensive operations
• Why these threats still map to familiar tradecraft and how to recognize them before they reach your environment
• How threat hunters use AI to connect campaigns, reduce research time, and develop stronger hunting hypotheses
• How SOC analysts use AI to move from alert to verdict faster and keep attackers from establishing a foothold