On this episode of Masters of Data, we take you inside the Dojo AI demo we’re bringing to the show floor at Black Hat. We walk through the SOC Analyst Agent, Mobot, and MCP back to back. SOC Analyst Agent triages every tier one alert down to the one that actually matters, and Mobot picks up from there, running the investigation in plain English to track down other phishing victims and lateral movement. We also show how MCP pulls that same insight into Claude or Slack. SOC leads tired of alert fatigue and analyst burnout will want the numbers here: 100% of tier one alerts triaged automatically, and 25 hours a week back per person.
0:00:00 – Introduction and Black Hat demo preview
0:01:34 – How SOC Analyst Agent cuts through alert fatigue
0:04:33 – Digging into a high-confidence malicious insight
0:07:14 – Why “human on the loop” beats human in the loop
0:09:03 – 100% tier one triage and 25 hours back per week
0:12:58 – Handing the investigation to Mobot
0:19:07 – Finding other victims and lateral movement
0:29:57 – Mobot beyond the SIEM, for logs and latency
0:34:18 – MCP: querying Sumo Logic from Claude and Slack
0:38:58 – Black Hat details and wrap-up