Let's SOC About It

In this episode of "Let’s SOC About It," host Amy Tom, Community Manager at D3 Security, welcomes Johannes Kresse, MSSP SOC Advisor in Germany, to talk about how the German SOC market is adapting to global trends. They explore the adoption of AI and automation in SOCs, the impact of compliance mandates like NIS2, and the pressures driving German SOC teams toward new technologies. Johanne...

Amy Tom sits down with Ali Alame, co-founder and CTO of CyberArmor, to talk about what's actually happening in the world of AI-generated phishing attacks. Ali shares what his team is seeing on the front lines: from 13-year-old hackers running phishing campaigns between classes, to criminal organizations running internship programs for budding cybercriminals. They dig into how attackers are byp...

They say modern SOCs are drowning in alerts. But what if the real problem is not the tools, it is the lack of strategy and unification? In this episode of the podcast, Amy Tom sits down with Reza Adineh, SOC Architect and Detection Engineer, to break down why today’s security operations models are fundamentally misaligned and what to do about it. Reza introduces his new framework, UTIOM - Unified...

In this episode, D3 Security's President – Gordon Benoit – explains why the next step for the SOC is not just faster triage, but autonomous investigation built around attack paths. Learn how Morpheus connects behaviors across the stack, builds attack paths, and shows its work so engineers can trust it, tune it, and scale it. If you are comparing L1 bots to real autonomous investigation, this e...

They say that Agentic AI is the new hot topic of cybersecurity. But what does that really mean? How does Agentic AI work? Can AI take over cybersecurity functions like threat hunting and detection? In this episode of the podcast, you'll hear from Rob Goehring, CEO and Founder of Wisr AI, about Agentic AI. You'll learn: 👉 What happens when we use multiple AI threat intelligent agents? 😱 H...

AI is changing the way SOCs function, pushing organizations to rethink technology, processes, and people. Filip Stojkovski, Founder of SecOps Unpacked and a cybersecurity veteran with 15 years of experience, joins us on the Let's SOC About It podcast to explore how SOC teams can gain value from implementing AI into their practices. Learn how to maximize your organization's ROI on AI SOC pl...

In this episode of the Let’s SOC About It podcast, Francis Odum gets a first look at Morpheus AI, D3 Security’s AI SOC platform. Amy Tom and David Torres dive into the use of AI in the SOC with Francis Odum, the Founder and Chief Cybersecurity Analyst of Software Analyst Cyber Research. In this episode, you’ll find out:🧐 How can AI eliminate the need for constant manual tuning of static playbooks...

In this episode of the Let's SOC About It podcast, Amy Tom chats with Sarim Khawaja, a Product Lead at Styx Intelligence, about the dangers of cyber scam mills. They discuss the growing threat of organized, factory-like operations that execute online scams on an industrial scale. In this episode, you'll learn: 🏭 What cyber scam mills are and how they operate 🌏 Why they are prevalent in S...

Threat detection teams are on the frontlines of detecting, inspecting, and publishing findings on new threats. But how do they get there? And what does it take to understand and dissect malware? On this episode of the podcast, we're joined by Randy Pargman, the Senior Director of Threat Detection at Proofpoint, to ask him:🔄 How does reverse malware engineering work?🔎 How do you know what you...

Online data brokers may seem like a consumer privacy issue –but as our guest explains on this episode of Let's SOC About It, they’re a growing business risk. Paul Mander, General Manager of Optery, joins us to expose the scale of the online data broker ecosystem and how it fuels targeted cyberattacks like phishing, smishing, and impersonation. The line between personal and business identity is blu...

Identity-based attacks aren't slowing down. In fact, as Chip Bircher tells us on this episode of Let's SOC About It, it's not something you can ignore. Chip Bircher, CTO of SOFTwarfare, talks about execution methods and ways to combat identity-centric threats. In this episode, you'll learn about:👮 The military/cybersecurity crossover⚠️ How bad actors execute identity-based attack...

EDR telemetry data is essential to investigating alerts and responding to threats. Kostas Tsialemis is the independent security consultant behind the DFIR Report and the EDR Telemetry Project. For this episode of Let's SOC About It, we chat with Kostas about the starting the project, working with vendors, and fostering a community to influence EDR tooling. In this episode, you'll learn:🤝...

AI is used in phishing attacks by both bad actors and incident responders alike. So what do phishing attacks look like today, and how do we combat them? On this episode of Let's SOC About It, Amy is joined by Curtis Goddard and Brad Farris from Check Point. In this episode:🎣 What do phishing attacks look like today?😱 How is AI leveraged by bad actors in phishing attacks?⚔️ How can you use AI...

With RSAC right around the corner, we sat down with Francis Odum to talk about his tips for a good conference. In this episode, we discuss:🔥 The hottest tech to look out for at RSAC🎁 The most useful conference swag💃 The best RSAC parties and eventsDon't forget to visit D3 at Booth N-4400 in the north hall of the Moscone Center in San Francisco 🤗Relevant links:Meet with us at RSAC: https://...

It’s back to basics this week because you can’t successfully automate without the right foundation and an effective automation strategy. Mandy Neely, a Senior Security Engineer at a Healthcare Organization, joins us on the podcast to talk about S.E.C.U.R.E. automation. In this episode, you’ll learn about Mandy’s S.E.C.U.R.E. approach to automation: S – Start with an existing process E – Error hand...

AI and deepfake technology is getting more and more advanced. We often associate "getting deepfaked" with celebrities and well... anyone but people in our own networks. But CEOs and C-suite executives are amongst the most at risk to deepfake attacks, and they've got a lot to lose. On this episode of Let's SOC About It, Benny Epand – Business Director of iZooLogic – talks about ho...

Like it or not, whether you’re dealing with a product launch or a security breach, media has a big influence on cybersecurity. Jessica Davis, former Editorial Director at CyberRisk Alliance and current Principal Analyst at Canalys, shares her tips on how to MSSPs can effectively use media as a tool in business.  From communicating with journalists to reaching the right audience, we explore what it...

The AI-Augmented SOC is here, and with the current wide-spread range on AI adoption in the SOC, Francis Odum joins the Let's SOC About It podcast to discuss the future of AI SOC. In this episode: What does AI-augmented SOC look like today? Are companies replacing analysts with AI SOC platforms? What's in store for the future of AI SOC? Relevant links: Introducing D3's new Morpheus AI:...

Biometrics data hacking is evolving– and, if you’re not careful and aware of the risks, it could potentially be used in an attack against your organization. In this episode, we’ll hear from Rishabh Goswami, a Compliance Manager at Amazon Web Services (AWS), as he shares real-world examples of how biometrics data is used by both malicious actors and businesses alike. In this episode, you'll learn:...

It’s a new year, and with that brings an opportunity for MSSPs to re-evaluate their growth strategies to reach new customers and diversify their offerings. This week, Amy chats with Tony UcedaVelez, CEO & Founder of VerSprite, about offering Threat Modelling as a Service. Tony explains his 7-step threat modelling methodology, PASTA, and how he incorporates his methodology into security service...

Identity and access management (IAM) is stepping up and adopting AI & automation to tackle the ever-growing “Phishing Problem”. Amy chats with Natee Pretikul, the Principal PM Manager at Microsoft Security, about how MFA, passkeys, and AI-driven tools like Microsoft Copilot are transforming security strategies. In this episode, you will learn: 🐟 How does enabling multi-factor authentication (...

We’re joined this week by Ketan Nilangekar, the Co-Founder and CEO of ThreatWorx, to answer the question– how can we approach third-party risk management today, especially in the newly AI-driven world? In this episode: 🚧How do we deal with the challenges of third-party risk management? 🤖What role does AI play in the risk management space? 🔐Does the market need a new push towards stronger securi...

Enter the world of AI in cybersecurity with Anthony Green, President of the ISACA Vancouver Chapter. From managing data protection to setting up the right guardrails, Anthony shares practical insights into getting the most out of AI while maintaining your security posture. In this episode, you’ll find out: 🤔 How can businesses ensure AI models align with security policies and privacy standards?...

They say that innovation isn’t just about adopting the right technology, it's about adopting a change mindset that allows you to adapt to the evolving environment in cybersecurity… Ok, well maybe no one actually says that, but it’s still true. In this episode of Let’s SOC About It, Amy Tom chats with Evgeniy Kharam about how SOAR and SIEM tools have adapted to changes in the tech landscape. In thi...

Whether you’re new to cybersecurity, want to switch things up, or find yourself looking for a job well into your career, this episode of ‘Let’s SOC About It’ helps you answer the question, “why is getting a job in cybersecurity so hard?” Amy Tom talks with Francois Guay, the Founder of the Canadian Cybersecurity Network, about navigating today’s competitive cybersecurity job market. In this episod...