Security operations are evolving from alert-driven monitoring toward AI-assisted investigation and response. In this session, I’ll share my journey of building an Agentic SOC using Elastic, Google Cloud, and Google ADK. Through architecture insights and a live demo, we’ll see how agents correlate events, investigate threats, enrich findings, and generate evidence-backed intelligence across scenarios such as service-account compromise, privilege escalation, and data exfiltration.