AI Worker Bees: Automated Threat Response Through Dynamic Adversary Engagement

The future of defense is watching attackers in real-time and automatically responding with dynamic engagement, buying critical time while extracting maximum intelligence. In this session, we’ll uncover research on techniques that use AI systems to generate entire fake organizations in real-time to engage attackers. Using AI, security teams can create credible scenarios, like a global bank with thousands of employees across three continents, including complete departmental structures, employee IDs, email chains, and financial documents. When attackers enter, AI detects their goals within minutes (whether ransomware deployment, data exfiltration, lateral movement) then automatically generates targeted content to keep them engaged longer. Attendees will learn practical frameworks for implementing automated threat response, methodologies for generating realistic content, and strategies for gathering actionable threat intelligence from live attacks.