Topic starter
02/08/2026 9:38 am
TL;DR: Agentic AI can now execute real SOC investigations inside the security stack, logging actions, querying telemetry, and preparing containment steps while still requiring human approval for high-impact actions, according to LimaCharlie. That shifts the question from whether AI can assist analysts to how tightly its access, auditability, and guardrails are governed.
Editorial analysis by NHI Mgmt Group, based on content published by LimaCharlie: “When Claude Code Hunts Cobalt Strike: Agentic Security Operations in Action”.
Key questions
Q: What breaks when an AI agent can investigate but not be governed like an operator?
A: The failure mode is uncontrolled delegation.
Q: Why do agentic SOC tools need human approval for containment actions?
A: Because containment changes the environment, not just the analysis.
Q: What are the signs that AI-assisted investigations are too loosely controlled?
A: Look for missing tool-call logs, unclear permission ownership, one-size-fits-all access for read and write actions, or agents that can move from detection review into containment without an approval step.
Practitioner guidance
- Define separate read and write boundaries for agentic SOC workflows Allow AI systems to query detections, inspect telemetry, and draft response steps, but require explicit approval for containment, suppression, or production changes.
- Log every AI tool invocation and decision path Capture prompts, queries, returned evidence, tool calls, and approved actions so the full investigation chain can be reconstructed during review or incident response.
- Inventory agent identities as governed non-human identities Treat each AI operator, CLI integration, or automated investigation workflow as a named identity with scoped permissions, owners, and revocation paths.
Bottom line: Agentic SecOps changes the control problem by letting AI execute investigation steps inside the stack, which makes permission scope and auditability central.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
02/08/2026 12:32 pm
Agentic SecOps is becoming an execution-governance problem, not a model-selection problem. Once an AI can query telemetry, enumerate processes, and prepare response actions, the decisive question is who can authorise each class of action. That moves the control boundary from prompt quality to operational authority, which is why identity and privilege governance now sit at the centre of AI-assisted SOC design. Practitioners should treat the agent as a privileged operator with a constrained task scope.
A few things that frame the scale:
- Claude Code-assisted commits leaked secrets at a rate of 3.2%, more than double the human-only baseline of 1.5%, with peaks reaching 31 secrets per 1,000 commits in August 2025, according to the State of Secrets Sprawl 2026.
- 96% of security operations teams report critical blind spots, most commonly in cloud infrastructure (74%) and identity and access behaviour (67%).
A question worth separating out:
Q: How should security teams govern AI-enabled workflows that can act on their own?
A: Treat them as identity-governed execution paths, not just software features. Assign a named owner, define least-privilege access, log every tool call, and require revocation paths for credentials and tokens. If the workflow can touch production systems or sensitive data, its permissions must be reviewed with the same discipline used for privileged machine identities.
👉 Read our full editorial: Agentic security operations with Claude Code change SOC execution