Accelerating Threat Triage with FortiSOAR-8.0 Agentic AI & MCP Integration
Analysts investigate attack surfaces and defenses concerning Accelerating Threat Triage with FortiSOAR-8.0 Agentic AI & MCP Integration.
Summary
Overview: Fortinet demonstrates FortiSOAR 8.0's agentic AI and MCP integration for accelerating SOC threat triage through automated investigation workflows.
Key Topics: FortiAI configuration and token allocation; MCP server connectivity for extending agent capabilities; organization context for guiding investigations; and automated verdict generation with remediation recommendations.
Technical Details: AI agents query MCP-connected tools to enrich alerts with user details, process context, and IP/host intelligence. Agents evaluate evidence against organizational SOPs and deliver investigation summaries within seconds.
Takeaways: Agentic AI can eliminate repetitive triage when integrated with organizational context via MCP. SOC teams should evaluate AI agents that ground decisions in institutional knowledge.
Related talks
RSAC Cybersecurity·17 min
Analysts investigate attack surfaces and defenses concerning Outpace Cyber Threats with Agentic AI + Human Ingenuity | Tomer Weingarten, SentinelOne | RSAC 2025.
Fortinet·6 min
Engineers explore architecture and security mechanisms for FortiEndpoint EDR Demo: AI-Powered Threat Investigation and Response.
Fortinet·4 min
Analysts investigate attack surfaces and defenses concerning FortiSIEM 7.5 Agentic AI | Product Demo.