Training
Featured CourseView All Courses
Get a free hour of SANS training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
Cloud Security Training, Courses, and Resources
Can't find what you are looking for?

Let us help.

Contact us
Community Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely.

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Talk With an Expert
Talk With an Expert

AI In Security Operations – Randori Spotlight

Login to download
AI In Security Operations – Randori Spotlight (PDF, 0.39MB)Published: 20 Aug, 2024
Created by:
Mark Orlando
Mark Orlando

This paper outlines a functional model that can be used to describe key SOC capabilities, challenges in delivering these capabilities using common SOC tools, and ways AI can bring transformational change to SOC workflows.

Meet the expert

Mark Orlando
Mark Orlando

Mark Orlando

Certified Instructor

Mark Orlando brings extensive cybersecurity leadership experience from the Pentagon, White House, and Fortune 500 sectors. As Bionic Cyber's CEO, he's a respected security operations expert with military and academic credentials.

Read more about Mark Orlando

Additional resources

AI-Driven SecOps: Unifying Controls, Automating Response, and Advancing the Modern SOC Using Cortex XSIAM

WhitepaperArtificial Intelligence
  • 29 Jul 2025
  • Dave Shackleford

Trust But Verify: Evaluating the Accuracy of LLMs in Normalizing Threat Data Feeds

WhitepaperArtificial Intelligence
  • 16 Jul 2025

Do AI Coding Assistants Make Bad Coders Worse? A Security Evaluation of GitHub Copilot

WhitepaperArtificial Intelligence
  • 11 Jul 2025

Beneath the Mask: Can Contribution Data Unveil Malicious Personas in Open-Source Projects?

WhitepaperArtificial Intelligence, Digital Forensics and Incident Response
  • 13 May 2025
  • SANS Institute

AI-Driven Insecurity: Assessing Security Gaps in AI Generated IT Guidance

WhitepaperArtificial Intelligence, Cyber Defense
  • 13 May 2025

SIEM Detection Logic Conversion with LLMs

WhitepaperArtificial Intelligence, Cyber Defense
  • 2 May 2025