APEX: Adversarial Pattern Extraction and Correlation

AI has collapsed the IOC decay curve to zero — hash values die in one model inference, domains in a single campaign. The bottom of the Pyramid of Pain isn't eroding, it's on fire, and more threat feeds won't fix it. Drawing on a 12-month dataset of 832 AI-assisted threat actors — including GTG-1002, the highest-risk actor observed — this session introduces APEX: a signal-based detection framework that chains behavior, not techniques, into 23 named detections and turns alerts into analyst-ready briefs in under 90 seconds. You'll learn: - Why static IOC- and rule-based detection can't keep pace with AI-assisted adversaries - How to architect a source-agnostic detection pipeline that survives vendor schema changes - What 23 production behavioral chains look like, tiered by empirical risk score ## Follow Cribl LinkedIn: https://www.linkedin.com/company/cribl/ Twitter: https://www.twitter.com/cribl_io Sign up for a Cribl.Cloud account: https://cribl.cloud/signup/ Learn more about Cribl: https://cribl.io