ÜBER DIESE EPISODE
KC Yerrid joins Detection Dispatch to break down SCOUT — a local-first, open-source analyst cockpit built around atomic notes, entity relationships, and structured investigation memory.
The SCOUT Project Github: https://github.com/kcyerrid/SCOUT
In this episode, we explore:
- Why static investigation notes rarely get referenced again and why tribal knowledge evaporates after every incident
- Why “everything is an entity” is a massive shift for analysts
- How graph-based sensemaking helps visualize relationships, dashboards can’t
- Why brittle SOAR playbooks fail (investigations aren’t linear — you can’t pre-plan every branch)
- Why investigations don’t fit neatly into tickets and timelines
- And how better documentation makes AI actually useful later
Plus: junior analysts can level up faster with entity-based thinking.
If you have to keep re-learning the same lessons every quarter… this one’s for you.
Detection Engineering Dispatch features candid conversations with security teams at top companies on how they build, measure, and scale world-class detection programs.
Englisch
Vereinigte Staaten
TRANSKRIPT 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
VERGANGENE FOLGEN SUCHEN
Vorhandene Folgen von Detection Engineering Dispatch durchsuchen.
WEITERE EPISODEN IN DIESEM PODCAST
In a world where SOCs are dissolving, job roles are glitching, and where the attack surface blurs between our work <> personal life between Slack & Discord, one thing remains constant: detection never sleeps.
On this episode of Dispatch, we’re joined by Day Johnson — detection engineer at…
On this Detection Dispatch, host Alex Hurtado sits down with Jake Berkowsky CTO at Snowflake to crack open one of the hottest and often misunderstood topics in modern SecOps: the rise of the security data lake x security data lakes as your SIEM.
Modern detection architecture isn’t about choosing SI…
LLMs are rewriting the rules of app security—and not always in a good way.
In this episode Alex sits down with Scott Rogers, a seasoned data scientist at ANvilogic to unpack why LLMs are the new wild west of application risk—and how old-school OWASP principles are making a serious comeback.
We cove…
Everyone’s talking about agentic AI—but what are we actually building? In this episode, Oliver Rochford and Alex unpack five bitter pills security teams need to swallow about the current state of “agents.”Most aren’t autonomous, many are mislabeled, and flashy wrappers can’t hide weak detections or…
Join Snowflake’s Insider Threat team for a direct discussion on separating everyday behavioral drift from true malicious intent. We examine role changes, privilege creep, and off-hour access, showing how context—identity, project timelines, and data lineage—sharpens detection and reduces noise. The…
Rechtliche Hinweise: Der auf dieser Seite eingebettete Podcast und das Bildmaterial stammen von Anvilogic, das Eigentum seines Eigentümers ist und nicht mit Listen Notes, Inc. verbunden ist oder von diesen unterstützt wird.
BEARBEITEN
Vielen Dank, dass Sie uns helfen, die Podcast-Datenbank auf dem neuesten Stand zu halten.
