Hunting Threats with AI: How Cribl's Security Team Uses the Run Investigation Capability in Search

AI promises to transform security operations, but what does that actually look like day-to-day? In this session, Cribl's own security team pulls back the curtain on how they use Cribl Search’s AI-powered investigation feature to hunt for threats, investigate anomalies, and quickly respond to incidents across their environment. Expect real workflows, honest lessons learned, and concrete examples of threats that AI helped surface that traditional approaches missed. Whether you're evaluating the new tool or already using it, you'll walk away with practical tips and tricks that can help you get to the bottom of incidents faster. Attendees will learn: - How Cribl's security team structures AI-assisted threat hunting, including query and prompt strategies that actually work - Real examples of threats and anomalies surfaced using Cribl’s investigative tools - Where AI accelerates workflows and where a human still needs to lead - How data quality in your Cribl pipelines directly affects AI output ## Follow Cribl LinkedIn: https://www.linkedin.com/company/cribl/ Twitter: https://www.twitter.com/cribl_io Sign up for a Cribl.Cloud account: https://cribl.cloud/signup/ Learn more about Cribl: https://cribl.io