cyber.hendryadrian.com
Security News · helpnetsecurity.com

Exabeam Adds AI-Assisted Security Investigations and On-Premises Agentic SOC Features

· Original article ↗

Summary

Exabeam announced Agentic SOC updates for AI-assisted investigations, AI-agent activity monitoring, and on-premises LogRhythm SIEM operations, including generative AI data collectors and a local-model MCP server.

Key points

  • Nova AI can gather context, run secondary searches, and retrieve entity profiles as incidents unfold; Exabeam says its internal team triaged an average case in about 10 minutes.
  • A new plugin brings guided alert triage and investigation workflows to Claude Code and OpenAI Codex.
  • Agent Behavior Analytics and Claude Enterprise integrations aim to provide visibility into AI-agent prompts, tool calls, actions, and behavioral changes.
  • Modernized LogRhythm SIEM adds generative AI collectors for ChatGPT, Google Gemini, and GitHub Copilot.
  • A community MCP server lets teams query and investigate security data with local generative AI models without moving data outside their environment.
  • The LogRhythm update includes an in-place migration from Elasticsearch to OpenSearch and a self-service reporting engine with AI governance and compliance reporting.

Article Details

Event Type
Exabeam launched new AI-assisted Agentic SOC capabilities for cloud and on-premises security operations.
Impact
The capabilities are intended to accelerate security investigations, improve visibility into AI-agent activity, and bring AI-assisted security operations to organizations keeping security data on-premises. Exabeam reports that Nova AI triaged an average case in approximately 10 minutes, compared with five hours for a human analyst; this measurement comes from Exabeam's own security operations team.

People

Eduardo Sulvarán VelázquezSubdirector Cyber Risk Management at E-Global; described the reported benefits of Exabeam Nova AI.Michelle AbrahamIDC Research Vice President, Security and Trust; commented on the evolution toward an agentic SOC.Steve WilsonExabeam Chief AI and Product Officer; commented on the Agentic SOC.

Vendors

ExabeamExabeam has launched new Agentic SOC capabilities that combine AI-driven investigation, execution, and governance across cloud and on-premises environments.

Products

Agent Behavior AnalyticsThe update expands Nova AI, Agent Behavior Analytics, and LogRhythm SIEM to help teams investigate faster, gain visibility into autonomous AI activity, and maintain control over sensitive data.ChatGPT#ExabeamClaude CodeThe new Agentic SOC Plugin adds guided investigation inside Claude Code and OpenAI Codex.Claude EnterpriseClose AI visibility gaps with Claude Enterprise.Exabeam MCP Serverfueled continued investment in generative AI and agentic security, including Exabeam Nova AI, the Exabeam MCP Server, and the expansion of Agent Behavior Analytics (ABA) to monitor AI agents alongside human users.GitHub CopilotNew generative AI collectors for ChatGPT, Google Gemini, and GitHub Copilot give security teams centralized visibility into enterprise AI activity through LogRhythm Intelligence Analytics.Google GeminiNew generative AI collectors for ChatGPT, Google Gemini, and GitHub Copilot give security teams centralized visibility into enterprise AI activity through LogRhythm Intelligence Analytics.LogRhythm SIEMThe update expands Nova AI, Agent Behavior Analytics, and LogRhythm SIEM to help teams investigate faster, gain visibility into autonomous AI activity, and maintain control over sensitive data.Nova AIThe update expands Nova AI, Agent Behavior Analytics, and LogRhythm SIEM to help teams investigate faster, gain visibility into autonomous AI activity, and maintain control over sensitive data.OpenAI CodexThe new Agentic SOC Plugin adds guided investigation inside Claude Code and OpenAI Codex.OpenSearchThese capabilities run on a modernized foundation, based on an in-place migration from Elasticsearch to OpenSearch.

Related Articles