Closing the loop: Agentic threat intelligence and threat response
Presented by: Blake Darche, Javier Castro
Originally aired on October 24 @ 7:00 AM - 7:30 AM EDT
Security teams are drowning in two asymmetries: attackers move at machine speed, while analysts triage and write intelligence at human speed. This session presents two production systems — built entirely on Cloudflare’s developer platform — that close that gap by embedding agentic-driven agents on both sides of the defensive lifecycle: threat intelligence agents that reason over what we know, and threat response agents that act on what we find. On the response side: a lightweight endpoint agent that streams forensic artifacts where an agentic pipeline extracts IOCs and enriches them. On the intelligence side: software that turns enrichment output into finished reporting.
English
