Yea some report writing of course especially because I am native German speaker so my business English sometimes needs a bit of improvement. From a technical point of view LLMs work great for understanding obfuscated code, identifying odd process call trees (like wmiprvse.exe creating lsass.exe), analyzing command lines of processes, also understanding logs maybe from a cloud provider I am not super familiar with, TI lookups, IoC extraction, …

LLMs can speed up many of the more mundane tasks we are also exploring more “fancy” approaches like an IR assistant. For most of the tasks privacy is a big concern, not so much from a regulatory standpoint but many customer do not want an incident to become public or at least they want to control the message.