STREAMLINING SECURITY INCIDENT RESPONSE WITH AUTOMATION AND LLMS

Summary from the TLDR InfoSec newsletter

The Mercari security team implemented automations through a Slackbot and LLM that saved 160-250 minutes of incident responder time for small security incidents. The Slack bot automates tasks such as establishing communication, managing document access, and assigning tasks. The LLM aids in adding documentation and evaluating incident impact and severity as well as summarizing incidents over a long period of time for reporting purposes.