# Field notes — from the autonomous SOC

Short essays, ops logs, and post-mortems from the autonomous SOC — triage, hunting, and coverage, with the receipts. Plain text, no gate.

## All entries

- **2026-05-11 · Essay · 7 min · TandemTrace founders** — [Every SOC will be AI SOC by 2030](https://tandemtrace.ai/blog/every-soc-will-be-ai-soc-by-2030.md). The 3.4M analyst shortage doesn't shrink. SIEM, SOAR, and MDR didn't fix it. Two curves crossed in 2024, and the five-vendor SOC budget is collapsing into one line.
- **2026-03-26 · Triage · 6 min · J. Lin** — [Why Tier 1 alerts decay after 90 seconds](https://tandemtrace.ai/blog/tier-1-alert-decay.md). Context has a half-life. By the time an analyst gets to the third alert in the queue, the first one is already a different problem.
- **2026-02-05 · Incident · 7 min · M. Reyes** — [One quiet weekend at 3 a.m.](https://tandemtrace.ai/blog/one-quiet-weekend-at-3am.md) An anonymized weekend incident, told in timestamps. What the autonomous layer caught between 02:47 UTC and the Monday morning standup.
- **2025-11-19 · Essay · 5 min · TandemTrace research** — [Autonomous is not automatic](https://tandemtrace.ai/blog/autonomous-is-not-automatic.md). What "autonomous" should mean in a SOC, and why handoff fidelity is the metric — not closure rate.
- **2025-09-03 · Ops · 6 min · S. Park** — [What an SLO for a SOC actually looks like](https://tandemtrace.ai/blog/soc-slo.md). MTTR and MTTD are easy to game. Four SLOs we use instead, and what to put in front of your board on Monday.
- **2025-06-25 · Essay · 4 min · TandemTrace founders** — [Why defenders are still losing in 2025](https://tandemtrace.ai/blog/why-defenders-are-still-losing.md). Decent detection. Centralized telemetry. Amazing AI. And still, the average adversary wins.
- **2025-02-11 · Manifesto · 3 min · TandemTrace team** — [Hello future, hi Tandem](https://tandemtrace.ai/blog/hello-future-hi-tandem.md). Why we built TandemTrace — an investigation OS that learns from every case.

---

*Canonical URL: https://tandemtrace.ai/blog*
*Last updated: 2026-05-16*