Effective AI for Practical SecOps Workflows w/ Hayden Covington

Which AI workflows are already running in production SOCs right now, and which ones could you implement by next week?🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits:https://poweredbybhis.com 🛝 Webcast Slides:https://www.antisyphontraining.com/wp-content/uploads/2026/01/Effective-AI-for-Practical-SecOps.pdf✏️ Learn from Hayden on Antisyphon Training:https://www.antisyphontraining.com/search/HaydenJoin Hayden Covington (Black Hills Infosec - SOC SecOps Lead) for a free one-hour training session to learn how to augment security analysts with AI through practical, tested workflows. Cut through the noise of vendor demos, hype, and ChatGPT wrappers. Hayden will teach you practical AI workflows that help analysts work faster and smarter without replacing their judgment. Learn real techniques for detection engineering, case management, and QA, plus where AI truly helps (and where it doesn’t) so you can apply it right away.Chat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhisin the #🔴live-chat channelChapters:(00:00) - INTRO – 2026-01-28 Effective AI Hayden (02:18) - About Hayden (03:22) - What This Session Is (and Isn't) (04:15) - Let's Get Something Straight (06:00) - What Augmentation Actually Looks Like (11:52) - Before You Implement Anything...STOP (13:03) - Consideration: Cost (18:19) - Consideration: Policy & Legal (20:30) - Consideration: Data Sensitivity (21:10) - Consideration: Team Buy-In (23:24) - Consideration: PEBKAC (27:44) - How We'll Break Down the Use Cases (29:03) - Start This Week! – AI Projects: Curated Team Agents (32:01) - Building a Good Agent (33:07) - Detection Code Review Agent (35:20) - Detection Code Review: Example Prompt (GH) (36:50) - Why Markdown and Change Controlled Prompts Win (38:27) - Start This Week! – SOC Analyst Agent (40:09) - SOC Analyst Agent: Example Prompt (41:45) - Other Agent Examples (42:42) - Quick Wins: Raycast InfoSec Extensions (44:33) - Raycast Example (45:01) - Build This Month! – Case Management: Alert Titles & Summaries (46:12) - Case Management: Example (46:59) - Case Management: Sample Implementation (47:57) - Build This Month! – Quality Assurance: Automated Ticket Review (48:33) - QA Workflow Options (49:34) - QA: What It Catches (50:04) - QA: Sample Prompt (51:26) - Build This Month! – Detection Engineering: First-Draft Generation (53:01) - Detection Engineering Workflow (53:53) - Detection Engineering: Starter Approach (54:34) - Detection Engineering: Sample Prompt (56:47) - Where AI Often Fails (59:16) - Key Takeaways (01:00:20) - Resources & Next Steps (01:01:28) - QA Start (01:04:20) - Patterson's Workshop Creators & Guests Hayden Covington - Guest Meagan Bentley - Producer Jason Blanchard - Host CJ Cox - Guest Patterson Cake - Guest Brought to you by:Black Hills Information Security https://www.blackhillsinfosec.comAntisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.comClick here to view the episode transcript.