Resources • Videos
Security operations

Red Canary Office Hours: Episode 36 – Building AI agents for SecOps

Air Date: October 7, 2025

Building AI agents for SecOps

Keith and Dave are joined by Jimmy Astle, Director, Machine Learning at Red Canary to discuss highlights from a talk he recently gave at SecTor, Canada’s largest cybersecurity conference, on scaling security operations with AI.

Jimmy walks us through a new project he’s open sourced on how to build an AI agent and integrate it into a workflow to automate endpoint data forensics analysis.

Episode 36: AI Agents

Resources mentioned in this episode

Security update

Incident related to Red Hat Consulting GitLab instance.

New EDR-Freeze tool uses Windows WER to suspend security software.

Jimmy's new project

How to build AI agents and integrate them into a workflow to automate endpoint data forensics analysis.

Related Resources

Red Canary Office Hours: Episode 50 – Build vs. buy for AI in the SOC

Videos| Security operations

Red Canary Office Hours: Episode 50 – Build vs. buy for AI in the SOC

Red Canary Office Hours: Episode 49 – Measuring impact: The true ROI of AI in the SOC

Videos| Security operations

Red Canary Office Hours: Episode 49 – Measuring impact: The true ROI of AI in the SOC

Red Canary Office Hours: Episode 48 – How SOCs defend against AI-powered attacks

Videos| Security operations

Red Canary Office Hours: Episode 48 – How SOCs defend against AI-powered attacks

Red Canary Office Hours: Episode 47 – Fundamentals of building AI agent workflows in the SOC

Videos| Security operations

Red Canary Office Hours: Episode 47 – Fundamentals of building AI agent workflows in the SOC

Security gaps? We got you.

Sign up for our monthly email newsletter for expert insights on MDR, threat intel, and security ops—straight to your inbox.

Back to Top