Why Elastic thinks chat-only AI is slowing your SOC analysts down

When generative AI arrived in late 2022, it brought something security analysts hadn't had before – a conversational interface for their data. It also took something away. The click-through, drill-down investigative workflow that Security Operations Center (SOC) teams had built years of muscle memory around – chat doesn't do that. You ask, you get text, you tab away.

James Spiteri, Director of Product Management for Security, Generative AI and Machine Learning at Elastic, has been thinking about that gap since the beginning of the gen AI era. His answer, shipped recently as MCP Apps – built on the Model Context Protocol (MCP) – for Elastic Security, Observability, and Search, is an interactive user interface (UI) that renders inside the AI conversation itself – so the analyst gets both the text summary the model reasons over and the clickable dashboard they actually work in, in the same place.

Speaking over video...

Copyright of this story solely belongs to diginomica.com. To see the full text click HERE