Incident Response and Threat Intelligence Operations

Autonomous IR: What Happens When AI Takes the Lead in a cyber security incident?

Tuesday, June 23, 2026 8:00 AM - 11:45 AM

405/406

Description

What would happen if we stopped using AI as a chatbot and started using it as an Incident Commander? In this session, we go beyond the theory. I handed over the keys to a complete cyber security incident—from initial detection to final remediation—and let AI run the show. Come see the raw results: where it excelled, where it hallucinated, and how it managed a team across Google Chat and AWS. After we deconstruct the "AI Lead" experiment, the floor is yours. Participants will use AI to navigate a live, simulated incident, experiencing firsthand if AI is a force multiplier or a liability in the heat of a breach.