Name: Part 1: EDR Alert Triage Challenges
Start: 2025-03-10T14:13:00Z
End: 2025-03-10T14:13:05.000Z
Location: BrightTALK
Rating: 0

At Swimlane, we believe the convergence of agentic AI and automation can solve the most challenging security, compliance and IT/OT operations problems. With Swimlane, enterprises and MSSPs benefit from the world’s first and only hyperautomation platform for every security function. Only Swimlane gives you the scale and flexibility to build your own hyperautomation applications to unify security teams, tools and telemetry ensuring today’s SecOps are always a step ahead of tomorrow’s threats.

Learn more: swimlane.com

Automation and AI are hot topics; their need is obvious, and every cybersecurity vendor, from hyperautomation to SOAR to XDR or even SIEM, claims to have what it takes to automate enterprise security operations. So what makes Swimlane Turbine different from other security “AI automation” platforms? 

Bring your toughest questions about the AI automation vendor landscape and join Bryon Page, Swimlane Field CTO, for an honest look (we promise to leave the marketing speak at the door) at what it takes to ensure your security automation investment is successful.

Join this webinar to learn more: 
1 - Strategic considerations for selecting the right security automation vendor 
2 - Signs that your automation needs are expanding and evolving
3 - A high-level demo of Swimlane Turbine

Automation Showdown: Swimlane vs The Rest

Just as Blue Angels pilots must navigate chaos and make split-second decisions to avoid severe risks, cybersecurity professionals face a similar reality. Overwhelmed with alerts, data, and sophisticated attacks, the stakes are high, and the margin for error is razor-thin. Attackers only need to be right once; YOU must be right every time. 

Join a discussion with former Blue Angels Commander David "Mongo" Koss, former United States Marine Corps Marine Raider/Gunnery Sergeant and CISO Mike “77” Lyborg, and moderated by Tony “Tigger” Thompson where you’ll gain: 

1) Battle-tested strategies for conquering your chaos 
2) Tips for building resilience in high-pressure environments
3) Real-life examples of how to lead your team through cybersecurity turbulence 

Cybersecurity can be chaotic, but we're here to help you take control.

Turn Cockpit Chaos into Cybersecurity Precision: Blue Angels-Inspired Tactics to Gain Control

Discover the value of Swimlane Turbine AI Automation for Analysts in this demo led by Swimlane Consulting Engineer Thomas Keck. This video provides an overview of how soc analysts can utilize Swimlane Case Management and Hero AI, the leading private agentic AI SecOps companion.

The Value of Swimlane Turbine for Analysts

Watch Janne Nyman, Field CTO, in this demo as he explores the advanced capabilities of Swimlane Turbine Case Management. Discover how over 100 customizable fields and cutting edge AI capabilities provide your team with the functionality and reporting necessary for a modern Security Operations Center (SOC).

Swimlane Turbine Advanced Case Management

Join Bryon Page, Swimalne Field CTO, to learn about the value of Swimalne Turbine AI Automation for CISOs. This brief demo video provides an overview of business use cases for security operations, compliance audit readiness, and vulnerability response managemen

The Value of Swimlane Turbine for CISOs

Join Gavin Coulthard, Sr. Solutions Architect, to see how easy it is to ingest information from Ransomware Live into Swimlane Turbine dashboards to easily see:

1 - Ransomware victims by country
2 - Alerts overtime
3 - Which ransomware groups are involved 

With Swimlane Turbine, you can drill into specific ransomware events and trigger notifications when incidents have occurred to speed MTTR.

How to use Swimlane Turbine to Reduce Ransomware Risk

In this short demo, Gavin Coulthard, Sr. Solutions Architect, walks through how easy it is to transform data within Turbine—no coding required. See how you can streamline complex processes with just a few clicks.

How to Use the Transform Native Action in Turbine

Join Ed Amoroso, CEO of TAG Cyber and Michael Lyborg, CISO at Swimlane as they discuss SOC automation and security operations trends for 2025.

During this interview, you’ll hear CISO perspectives on many topics, including:
1 - The role of humans vs. technology in a modern SOC
2 - How AI and automation have changed the threat landscape  
3 - Advise for CISOs in 2025

TAG Cyber & Swimlane CISO Interview: SOC AI Automation

Fragmented data, siloed risk scoring, and poor cross-team collaboration are leaving organizations exposed. 68% fail to fix critical vulnerabilities within 24 hours, leading to breaches, compliance failures, and costly penalties. It's not just about patching anymore; it's about prioritizing the right vulnerabilities. Manual processes are costing businesses an estimated $48K per employee annually. There is a better way.

Join us for actionable insights from Swimlane's latest research report “Under Pressure: Is Vulnerability Management Keeping Up?", and discover how Swimlane hyperautomation for vulnerability response management can help you. 

In this webinar, our speakers will share:
1 - The biggest challenges facing your vulnerability management team and how to solve them
2 - Strategies to effectively score and prioritize vulnerability risks
3 - How AI and hyperautomation can transform your vulnerability management processes

Are You Keeping Up with Vulnerability Management?

In this demo, Josh Roback, Principal Security Solution Architect, will showcase how Swimlane's Vulnerability Response Management (VRM) Solution picks up where vulnerability scanners leave off,  providing enterprise-level intelligence for real-time action.

Watch the 5-minute demo to discover how Swimlane VRM goes beyond traditional vulnerability management, offering:

1 - risk-based prioritization
2 - exploit intelligence
3 - streamlined remediation workflows

Swimlane Vulnerability Response Management Solution Demo

During this demo, David Irwin, Director of AI Product Management, will demonstrate how Hero, the first private agentic AI companion for SecOps, can revolutionize your security operations. 
Watch this 5-minute demo to see Hero:

1 - Engage in contextually aware conversations 
2 - Provide transparent and trustworthy interactions
3 - Deliver intelligent summaries and recommendations
4 - Quickly finding critical insights within extensive datasets

Hero Agentic AI Companion Demo

Are you looking for ways to enhance your security operations efficiency and effectiveness with AI this year? If so, you’ve probably heard about AI agents. Still, you may wonder if this technology is fiction or fantasy, if AI agents can be trusted, and how agentic AI differs from generative AI.  


If you’re curious about these questions, this webinar is for you. We’ll explore real-world examples of how generative and agentic AI can help you work smarter, streamlining workflows, enhancing proactive threat detection, and automating key tasks. 

Hear from our experts:

-Agentic AI vs. generative AI - what’s the difference? 
-The do’s and don’ts for using AI in your SOC 
-Tips for getting (and quantifying) the business value of AI 
-Meet Hero, Swimlane’s private AI companion for SecOps 

Register now to explore how advanced AI automation solutions can enhance your SecOps and take your team to the next level.

Demystifying AI Agents: Fiction, Fantasy, or Future of SecOps?

Explore how Swimlane CISO, Michael Lyborg takes the stage at Black Hat Europe 2024 to uncover the transformative power of AI hyperautomation in modern security operations. Lyborg dives into how organizations can leverage AI-driven automation to unify their SecOps strategies, streamline compliance, and navigate the challenges of regulatory landscapes. 

Gain actionable insights to empower your security team and drive seamless compliance in the most intricate environments.

AI Hyperautomation: Navigate Continuous Compliance in Complex Environments

Let’s skip the crystal ball clichés. This isn’t another dull “future of cybersecurity” predictions webinar. 

Because big conversations need big energy, we’re spicing things up. Our panelists will tackle the honest truths that most security pros dance around while braving increasingly spicy wings and margaritas. Can they keep their cool while the heat rises? There's only one way to find out.

Hear our expert discuss:
Beyond the AI Buzz: We'll cut through the AI hype, explore its practical uses and benefits, and discuss the skills needed to leverage generative AI and the security risks of AI agents.


The Efficiency Imperative of Doing More with Bigger Budgets: We'll challenge the idea that bigger budgets equal waste and show how organizations can drive efficiency and maximize ROI with AI and automation.


The Future of Risk Management through Compliance: We'll discuss how emerging standardized compliance formats simplify risk management.

Hot Takes: Cybersecurity Truths You Need to Hear for 2025

In this 5-minute demo video, you'll see Gavin Coulthard, Sr. Solutions Architect, demonstrate how easy it is to use a webhook trigger to manage alerts in Turbine Canvas.

This video will demonstrate: 
Drag and drop webhook triggers in playbooks 
Use AI schema inference to discover automation outputs to be used in subsequent actions  
Apply no-code filters to ensure accurate automation

Demo Webhooks Trigger Turbine Canvas Playbooks

Traditional SOAR solutions often fall short of their promises, leaving SOC teams overwhelmed and vulnerable. Discover how AI automation goes beyond these limitations to deliver faster, smarter, and more effective security operations. Learn how next-level AI capabilities empower your team to detect, respond, and mitigate threats like never before.
Watch now to redefine what’s possible for your SOC with AI automation.

Beyond SOAR’s Broken Promises: Unlock Next-Level Security with AI Automation

Believe it or not, the challenge for most SOC teams isn’t detecting more threats—it's cutting through the noise and complexity around the tools meant to protect you. While XDR, and bundled SIEM and SOAR platforms each bring valuable features, the idea of relying on an all-in-one solution is more myth than reality. What’s really needed is a clear understanding of how to use automation to take your SOC tools to the next level and optimize your defenses.

Join us for a deep dive into the strengths and limitations of XDR, SIEM and traditional SOAR.  We’ll show you how AI-enhanced security automation goes beyond SOAR to more effectively bridge the gaps between SOC tools. Stay tuned for a live demo of Swimlane Turbine to showcase these concepts in action.

Key takeaways will include:

-A clear understanding of XDR, SIEM, and automation’s roles in security
-Practical strategies to enhance threat detection and response with automation
-Best practices and real-world use cases for security automation
-How AI can elevate your security automation efforts
-Why integrating diverse tools is essential for comprehensive protection

If you're ready for a reality check on your cybersecurity stack, this is the webinar for you. Don't miss out on the truth behind the hype—and how to make your systems work better together.

Cut Through the Noise: The Real Truth About XDR, SIEM, and the Future of SOAR

Join Chris Phillips, Southeast Consulting Engineer, as he kicks off a four-part series about EDR Alert Triage. This 5-minute video is part one and focuses on defining the EDR alert triage process, including common customer challenges and problems related to manual triage. 

Stay tuned for the rest of the series to see how Swimalne Turbine applies AI automation to save time and speed MTTR EDR alerts.

Part 1: EDR Alert Triage Challenges

AI Automation

AI Software

Low code

SecOps

Manual triage

Alert Triage

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Part 1: EDR Alert Triage Challenges

Presented by

About this talk

More from this channel