เกี่ยวกับตอนนี้
KC Yerrid joins Detection Dispatch to break down SCOUT — a local-first, open-source analyst cockpit built around atomic notes, entity relationships, and structured investigation memory.
The SCOUT Project Github: https://github.com/kcyerrid/SCOUT
In this episode, we explore:
- Why static investigation notes rarely get referenced again and why tribal knowledge evaporates after every incident
- Why “everything is an entity” is a massive shift for analysts
- How graph-based sensemaking helps visualize relationships, dashboards can’t
- Why brittle SOAR playbooks fail (investigations aren’t linear — you can’t pre-plan every branch)
- Why investigations don’t fit neatly into tickets and timelines
- And how better documentation makes AI actually useful later
Plus: junior analysts can level up faster with entity-based thinking.
If you have to keep re-learning the same lessons every quarter… this one’s for you.
Detection Engineering Dispatch features candid conversations with security teams at top companies on how they build, measure, and scale world-class detection programs.
ภาษาอังกฤษ
สหรัฐอเมริกา
สำเนาบทสนทนา 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
ค้นหาตอนที่ผ่านมา
ค้นหาตอนที่ผ่านมาของ Detection Engineering Dispatch
ตอนอื่นๆ ใน PODCAST นี้
In a world where SOCs are dissolving, job roles are glitching, and where the attack surface blurs between our work <> personal life between Slack & Discord, one thing remains constant: detection never sleeps.
On this episode of Dispatch, we’re joined by Day Johnson — detection engineer at…
Join Snowflake’s Insider Threat team for a direct discussion on separating everyday behavioral drift from true malicious intent. We examine role changes, privilege creep, and off-hour access, showing how context—identity, project timelines, and data lineage—sharpens detection and reduces noise. The…
Everyone’s talking about agentic AI—but what are we actually building? In this episode, Oliver Rochford and Alex unpack five bitter pills security teams need to swallow about the current state of “agents.”Most aren’t autonomous, many are mislabeled, and flashy wrappers can’t hide weak detections or…
On this Detection Dispatch, host Alex Hurtado sits down with Jake Berkowsky CTO at Snowflake to crack open one of the hottest and often misunderstood topics in modern SecOps: the rise of the security data lake x security data lakes as your SIEM.
Modern detection architecture isn’t about choosing SI…
LLMs are rewriting the rules of app security—and not always in a good way.
In this episode Alex sits down with Scott Rogers, a seasoned data scientist at ANvilogic to unpack why LLMs are the new wild west of application risk—and how old-school OWASP principles are making a serious comeback.
We cove…
ข้อสงวนสิทธิ์: พอดแคสต์และอาร์ตเวิร์คที่ฝังอยู่ในหน้านี้มาจาก Anvilogic ซึ่งเป็นทรัพย์สินของเจ้าของและไม่มีส่วนเกี่ยวข้องหรือรับรองโดย Listen Notes, Inc.
