The next step isn't adding more security tools. It's creating a reliable operating layer that connects alerting, enrichment, automation, and response. That's exactly why we’ve built Sentry Respond. (2/2)

SOC conversations keep pointing to the same issue: the challenge isn’t a lack of tools, it’s disconnected workflows. Alerts, dashboards, playbooks, and response processes often don’t work together when incidents escalate. (1/2)

The most mature SOCs don't just add more detections. They engineer. They connect detections to context, prioritization, and response workflows. Detection without response is only half the solution. Sentry Respond closes that gap. (2/2) falconforce.nl/services/blu...

A detection without enrichment, asset context, ownership, or clear next steps forces analysts to spend valuable time collecting it instead of responding. Reducing investigation time is just as important as increasing detection coverage. (1/2)

Automation only creates value when it’s observable, maintainable, and reliable during an incident. That’s the design principle behind FalconForce Sentry Respond: automation should be visible and trusted in analysts’ daily work. Not just automated for automation’s sake. (2/2)

Playbooks. Logic Apps. SOAR. Most SOCs have automation. But automation that fails silently is operational risk, not operational efficiency. If enrichment isn’t logged or workflows lack ownership, analysts end up trusting something they can’t verify. (1/2)

We were sold out, BUT we have received a room upgrade! Additional tickets are now available. Book your ticket before the last price-bump at July 31: blackhat.com/us-26/traini...

FalconForce@falconforce.nl · 2mo ago

Will we see you in Las Vegas? blackhat.com/us-26/traini... Our advanced defensive engineering training will teach you about the detection engineering lifecycle, SOC automation with playbooks and AI-based agentic workflows.

For SOC leaders, this is an operational challenge. For CISOs, it’s an assurance question: can we respond at the speed an incident demands, or does it still depend on manual processes that don’t scale under pressure? That’s the gap Sentry Respond is built to close. (2/2)

Incident response has become a timing problem. It’s no longer the first alert that slows SOCs down. It’s the time needed to understand what happened, enrich the incident, correlate signals, and decide on the right response. Manual investigation is becoming the bottleneck. (1/2)

At a recent session with our clients, we discussed the future of the SOC. The consensus? AI should strengthen analysts - not introduce uncertainty. Automate what’s repeatable, use AI smartly, and keep analysts in control of response.

By popular demand, FalconForce is bringing its Advanced Defensive Engineering in the Enterprise training home! We will provide the training as an independent event in September 2026 in Utrecht, the Netherlands. Registration and information: www.tickettailor.com/events/falco...

Will we see you in Las Vegas? blackhat.com/us-26/traini... Our advanced defensive engineering training will teach you about the detection engineering lifecycle, SOC automation with playbooks and AI-based agentic workflows.

Will we see you in Las Vegas? blackhat.com/us-26/traini... Our advanced defensive engineering training will teach you about the detection engineering lifecycle, SOC automation with playbooks and AI-based agentic workflows.

FalconForce was back at NorthSec in Montreal, Canada, with our 3-day advanced detection engineering workshop! The students had an ultimate learning experience with the opportunity to go all-in with real-life, hands-on lab exercises. We hope you learned a lot!

Get your ticket before May 22 to get the best early-bird price to our completely rebuild, hands-on, advanced defensive engineering training at BlackHat USA. More information and registration: blackhat.com/us-26/traini...

The early-bird rate is available until 22 May. More information and tickets: blackhat.com/us-26/traini...

Black Hat

Black Hat

blackhat.com

FalconForce@falconforce.nl · 5mo ago

We will travel to Las Vegas for the 5th time and host our new ADE training at #bhusa. Based on our own research and the great input we had in the past years from various trainings held, we further tweaked our training. More information and registration blackhat.com/us-26/traini...

Last week, we joined @specterops.io's SO-CON conference in Arlington, US. It has been an exciting week, with two FalconForce presentations on stage from Marat Nigmatullin and @olafhartong.nl. We look back at a great time at SO-CON!

We are excited to meet all the participants who have signed up already. For everyone else: you have a few more weeks to secure your ticket nsec.io/training/202...

FalconForce@falconforce.nl · 6mo ago

FalconForce returns to @nsec.io in Montreal with our 3-day Advanced Detection Engineering workshop! The NorthSec security conference takes places in Montreal, Canada from May 11-17. More information and registration: nsec.io/training/202...

We are excited to meet all the participants who have signed up already. For everyone else: you have a few more weeks to secure your ticket nsec.io/training/202...

FalconForce@falconforce.nl · 6mo ago

FalconForce returns to @nsec.io in Montreal with our 3-day Advanced Detection Engineering workshop! The NorthSec security conference takes places in Montreal, Canada from May 11-17. More information and registration: nsec.io/training/202...

@1ns0mn1h4ck.bsky.social has been great! Workshops in combination with an awesome conference, with amazing people from all around coming together in such a stunning environment. We had an excellent time! If you have missed this opportunity, please have a look at our website: falconforce.nl/events/

By popular demand, FalconForce is bringing its Advanced Defensive Engineering in the Enterprise training home! We will provide the training as an independent event in September 2026 in Utrecht, the Netherlands. Registration and information: www.tickettailor.com/events/falco...

We will travel to Las Vegas for the 5th time and host our new ADE training at #bhusa. Based on our own research and the great input we had in the past years from various trainings held, we further tweaked our training. More information and registration blackhat.com/us-26/traini...

We had a great time at @wildwesthackinfest.bsky.social @ Mile High 2026. @olafhartong.nl was on stage sharing about his follow-up research. EDRs can be fooled by tampering with the data they rely on. If we can't trust our logs, how do we deal with that? We look forward to the next edition of #WWHF!

Did you know that there is a very attractive rate for students? 🤫

FalconForce@falconforce.nl · 6mo ago

FalconForce returns to @nsec.io in Montreal with our 3-day Advanced Detection Engineering workshop! The NorthSec security conference takes places in Montreal, Canada from May 11-17. More information and registration: nsec.io/training/202...

FalconForce is proud to be part of SpecterOps' SO-CON conference in April. And this year, there’s not one but two FalconForce talks at #SOCON! More information and registration: specterops.io/so-con/

SOC analysts spend lots of valuable time on collecting more information, before being able to make decisions. Want to know more? Join our waitlist (falconforce.nl/services/blu...) and request a demo today.

In a few weeks, we will be in Lausanne, Switzerland, for our 3-day workshop Advanced Detection Engineering in the Enterprise at @1ns0mn1h4ck.bsky.social. Get your tickets now: insomnihack.ch/workshops/ad...

FalconForce@falconforce.nl · 7mo ago

The Insomni'hack (@1ns0mn1h4ck.bsky.social) cyber security conference takes place in Switzerland from March 16-20. We will once more facilitate our 3-day workshop Advanced Detection Engineering in the Enterprise. Visit insomnihack.ch/workshops/ad... for more details and to secure your ticket.

SOC analysts spend lots of valuable time on collecting more information, before being able to make decisions. Want to know more? Join our waitlist (falconforce.nl/services/blu...) and request a demo today.

FalconForce is proud to be part of SpecterOps' SO-CON conference in April. And this year, there’s not one but two FalconForce talks at #SOCON! More information and registration: specterops.io/so-con/

At FalconForce, we are always looking to enhance our detection engineering practices. In our latest #FalconFriday blog, we present the applied research that was done and our observations on near-real-time (NRT) analytic rules in practice: falconforce.nl/falconfriday...