Learn how a sovereign AI-powered SOC works. By running one.

Why this is different

You spend about 105 of the 120 minutes on the keyboard.

Most workshops are demos with a Q&A at the end. This one is not. Nobody drives while you watch.

The premise

You just got hired into an AI-empowered SOC.

Over two hours, you live your first 180 days.

What you'll do

Work in a lab built like a real SOC.

SIEM, security data lake, ticketing, and enrichment tools, all loaded with realistic data.

The capstone

Turn a real investigation into a working automation.

Take an investigation from earlier in the session and make its judgment criteria explicit. Encode it as a reusable Skill. Then schedule it to run before you get in tomorrow morning.

Who should come

Analysts at any level, and the people who manage them.

Detection engineers and threat hunters too. No prior Crogl experience needed.

You'll leave with

A much better sense of what AI SOC means.

Everyone says AI SOC. Few people have seen one work.

• A firsthand sense of what AI does well in an investigation, and where it still needs you
• The real difference between an AI that investigates and a copilot that gives you a better search box
• A way to check any AI verdict against the source data behind it
• An honest read on the gaps: which data sources can't answer the questions you need them to
• A working automation you built and scheduled yourself
• A community of like-minded builders in the security operations space