aiqbench analysis
This article describes a live cybersecurity operation utilizing multi-agent threat detection and AI-driven analysis to distinguish benign event traffic from actual threats in real-time. The core technology relies on Cisco's security telemetry and Splunk's enterprise platform to demonstrate scalable, autonomous security operations at an enterprise level. While the context is a conference event, the primary focus remains on the application of agentic AI for threat investigation and response within network infrastructure.
One Cisco in Action: Inside the Agentic SOC at .conf26

Read how Cisco Cloud Control and Splunk Enterprise Security powered the live Agentic SOC at .conf26 to deliver unified TDIR across live event traffic.
When Cisco and Splunk joined forces, the vision was to build a seamless, unified security architecture that eliminates the friction between the network, the endpoint, cloud workloads, and the security operations center. After battle testing at Black Hat USA, we turned that vision into operational reality at Splunk .conf26, by deploying an Agentic Security Operations Center (SOC) directly on the Pavilion floor. Check out the retrospective video. The .conf26 Agentic SOC was not a simulated demo…
Excerpt shown under the publisher's RSS terms · 76 words · full text and figures are on the publisher's site
Related coverage

Admin in the Loop: Firewalls and the Agentic SOC
Cisco Blogs · Oct 8, 2026
Nvidia’s scale-in play: Controlling agents is the next infrastructure priority
SiliconANGLE · Sep 29, 2026

Top 10 Best Identity Threat Detection and Response (ITDR) Solutions in 2026
Cybersecurity News · Jul 17, 2026

Splunk .conf26: Tracking the Triage Agent in the Agentic SOC
Cisco Blogs · Oct 8, 2026