Resources • Videos
Security operations

Red Canary Office Hours: Episode 36 – Building AI agents for SecOps

Air Date: October 7, 2025

Building AI agents for SecOps

Keith and Dave are joined by Jimmy Astle, Director, Machine Learning at Red Canary to discuss highlights from a talk he recently gave at SecTor, Canada’s largest cybersecurity conference, on scaling security operations with AI.

Jimmy walks us through a new project he’s open sourced on how to build an AI agent and integrate it into a workflow to automate endpoint data forensics analysis.

Episode 36: AI Agents

Resources mentioned in this episode

Security update

Incident related to Red Hat Consulting GitLab instance.

New EDR-Freeze tool uses Windows WER to suspend security software.

Jimmy's new project

How to build AI agents and integrate them into a workflow to automate endpoint data forensics analysis.

Related Resources

Red Canary Office Hours: Episode 41 – Bird feed: How Red Canary names and tracks threats

Videos| Security operations

Red Canary Office Hours: Episode 41 – Bird feed: How Red Canary names and tracks threats

Red Canary Office Hours: Episode 40 – The hidden tunnels of STORM-2603’s ransomware ops

Videos| Security operations

Red Canary Office Hours: Episode 40 – The hidden tunnels of STORM-2603’s ransomware ops

Red Canary Office Hours: Episode 39 – Nightmare on supply chain street

Videos| Security operations

Red Canary Office Hours: Episode 39 – Nightmare on supply chain street

Red Canary Office Hours: Episode 38 – September’s top threats, featuring Stef Rand from our Intelligence team!

Videos| Security operations

Red Canary Office Hours: Episode 38 – September’s top threats, featuring Stef Rand from our Intelligence team!

Security gaps? We got you.

Sign up for our monthly email newsletter for expert insights on MDR, threat intel, and security ops—straight to your inbox.

Back to Top