This is the next session of our monthly series. In these short (only 30 minutes) technical sessions we will dive deeper in Splunk Security Products. Each session includes a 20-minute technical introduction and demo, followed by 10 minutes of Q&A.

In this session we'll have a closer look at all the new features that come with the Enterprise Security 8.7 release. Expect the next step for the agentic SOC, completely new features, and expansions on existing agents, including:

• AI SOC Analyst: move from investigation to response at machine speed, with permitted actions executed automatically and next steps recommended when analyst approval is required

• Connector Builder Agent: generate, test, and refine connectors with AI to grow automation coverage

• Enterprise Security on MCP: give your AI the ES investigation context it needs — alerts, entities, findings, and supporting data

• Stronger Automation Builder and Detection Builder agents, with better playbook context, SPL guidance, and validation

• Updated ES navigation, analyst queue, team-based queues, and saved views

• View Change History: full analyst activity and change history in SPL search from the Activity Log
  
  
  The session recording can be found here: https://app.vidcast.io/share/d8dae350-4442-45a6-86cd-9e206163cbe3