The Agentic Reckoning: Rebuilding the SOC, NOC, and VOC for a Post-Mythos World

In this presentation, Paul Giorgi, VP of Technical Marketing and Engineering at ExtraHop, delivers a compelling look into the next frontier of cyber defense: The Agentic Reckoning. As threat actors rapidly adopt AI to automate hyper-tailored, signatureless attacks, the traditional boundaries of security operations are being forced to evolve.

Discover why IDC predicts that by 2028, AI agents will triage 80% of SOC alerts worldwide, and learn how organizations are leveraging multi-agent architectures to scale their defenses, lower costs, and outpace automated adversaries.

Key Takeaways:

• The Rise of "Lame Hug" Ransomware: Learn how modern threat groups (like APT28) are using hosted LLMs to dynamically generate custom environment-specific commands, bypassing traditional signature and anomaly detection.
• The Evolution of the SOC, NOC, and VOC: Understand the changing operational landscape and why assigning ticket ownership across expanding exposure windows requires agentic workflows.
• The Threat of "Heretic" & Obliterated Models: Explore how attackers use guardrail-free AI models (like custom Open Claw or Hermes instances) to execute persistent, technically proficient campaigns with zero human intervention.
• Multi-Agent Reference Architecture: Get a breakdown of how to build a scalable defensive pipeline—separating high-reasoning Triage Agents from large-context L1/L2 Investigation and Niche Identity/Forensic Agents.
• The Realities of Tokenomics: A practical look at the cost per incident and strategies to optimize your AI spend using local LLMs, strict depth constraints, and shared vector memory (like Qdrant).