Detection Engineering Dispatch is a detection engineering & threat hunting podcast featuring spicy use cases, real-world war stories, and the brilliant minds building the future of SecOps.We’re talking sharp takes, top-of-mind challenges, and community content straight from the folks pushing the limits of detection engineering, threat hunting, and everything in between.

Come for the nerdy bits. Stay for the vibes.

Register Now

Days Until The Next Episode Drop

00
Days
:
00
Hrs
:
00
Min
:
00
Sec

EP. 58

Online

Before he ever cried on the red line, Spencer Pratt broke his own RAG index.

In this episode of Detection Dispatch, Spencer Pratt (not The Hills one...this one writes detections, not drama) joins Dispatch to talk through what it really takes to operationalize agentic AI in the wild. From L1/2 triage to risk scoring, Spencer walks us through building a homegrown RAG system on top of Azure, complete with semantic search, vector embeddings, and even one risk score that always returns “zero” (because he told it to).

We get into:
– OpenAI in production for alert history correlation & analysis assist
– How to hallucination-proof your enrichment
– Why DNS exfil is still too weird for your LLM
– And why automation shouldn't make the decisions, but can help you decide faster

Also in this episode, you get a bonus:
🥲 Chicago starter pack of reccs for newly promoted SOC analysts
🍕 Bottomless brunch + skyline bike rides with the fam
🎮 Retro arcades and ramen bars that go harder than your SIEM

Detection Engineering Dispatch features candid conversations with security teams at top companies on how they build, measure, and scale world-class detection programs.

Episode Host Headshot
Alex Hurtado
Host

Past Episodes & Resources

Catch Every Episode. Listen Where You Want.