LoginChasing AMMYY at Splunk .conf
8 October 2026 at 15:00
Discover how Cisco's Encrypted Visibility Engine (EVE) and Endace PCAP uncovered Flawed AMMYY RAT traffic at Splunk .conf without breaking TLS encryption. 
Normal view
Received — 9 October 2026
⏭
Security – Cisco Blog
Admin in the Loop: Firewalls and the Agentic SOC
8 October 2026 at 15:00
Discover how Cisco Secure Firewall and Cloud Control stream structured Snort 3 and EVE telemetry into Splunk ES to power the .conf26 Agentic SOC pipeline.
-
Security – Cisco Blog
- The Zero-Day Blind Spot: Why Your Agentic SOC needs Retrospective Packet Replay
The Zero-Day Blind Spot: Why Your Agentic SOC needs Retrospective Packet Replay
8 October 2026 at 15:00
Learn how the .conf26 Agentic SOC paired Endace full PCAP with Cisco Secure Firewall and Talos rules to retrospectively replay wire data against zero-days.
One Cisco in Action: Inside the Agentic SOC at .conf26
8 October 2026 at 15:00
Read how Cisco Cloud Control and Splunk Enterprise Security powered the live Agentic SOC at .conf26 to deliver unified TDIR across live event traffic.
Splunk .conf26: Tracking the Triage Agent in the Agentic SOC
8 October 2026 at 15:00
How Cisco used Splunk as the SOC data platform at .conf26 to unify security telemetry and track the Splunk AI Triage Agent with human-validated workflows.
