paperSeptember 2026Unreviewed

It is Not Yet Another Tool: Creating and Deploying an Agentic AI Companion in a Security Operations Center

Kritan Banstola, Faayed Al Faisal, Duy Dao, Ryan Irving, Daniel Lende, Xinming Ou

Abstract

Security Operations Centers (SOCs) process large amounts of tickets, most of which are low-interest events not worthy of further investigation. The repetitive nature of this task and similarity of the vast amounts of tickets make it a prime candidate for generative AI-based automation. We created and deployed an agentic AI companion utilizing large language models through fieldwork within a SOC for over one year. The design of the SOC AI companion was driven by researchers' participation and int

Cite

@misc{banstola2026it,
  title = {{It is Not Yet Another Tool: Creating and Deploying an Agentic AI Companion in a Security Operations Center}},
  author = {Kritan Banstola and Faayed Al Faisal and Duy Dao and Ryan Irving and Daniel Lende and Xinming Ou},
  year = {2026},
  month = sep,
  eprint = {2609.06250},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2609.06250}
}