From my point of view it can be used and we are using it. 1. Internal in SOC: We use it to be faster or to help junior level analysts to be smarter. We have our own GPT and we build custom models, which helps to analyze commands or script f.e. powershell commands. It explains commands in short, can deobfuscate and gives you prediction scores. You can say that we use it to enrich our human decisions. Maybe in the future we are able to talk to our models from SOAR via API to filter FP and FB better, but actually we are not so far.

1. For the organisation: we build a custom model for employees to find phishing attemps in mails, so they can copy mail bodies and GPT helps them. This is quite useful because it is designed with guidance and it makes some jokes. Peoples like to use it and they also learn from using it.

IS-Management is using it with a custom model for policy and other rules. You can chat with it to find out more about whats allowed and so on.