The biggest news from my Graph the Planet keynote is that @louie_ai is the first #GenAI investigation agent to successfully speed-run @Splunk's annual Boss of the SOC (BOTS) competition: Thousands of professional cybersecurity analysts tackle BOTS every year, and Louie not only took the challenge, but completed a speed run well beyond most humans. Louie successfully tackled: - 100% of the 2xx-series questions - 50% of the 3xx-series - Turned what takes teams of analysts hours into mere minutes - Cut analyst workloads by 90%+ Why is this a big deal? Like OpenAI's breakthrough in passing medical and legal exams, Louie’s results mark that same watershed moment for AI in investigations. BOTS challenges pushes analysts to apply deep knowledge, creative intuition, and proficiently navigate databases and Python scripts to tame massive logs of machine and human activities. Our first numbers are forcing senior-most discussions with our major AI and CISO partners. These results are just from "Louie 1.x" - we're already deep into "Louie 2.x" developments, and are excited to share more. Check out the video for a feel! Presciently, @Berkeley_EECS Professor @dawnsongtweets made the call-to-arms during her @graphtheplanet talk that, critical for trust and progress in security AI investigations, is benchmarks that are transparent, rigorous, and open. We must break the pattern of tool providers writing their own tests, grading their own homework, and comparing to misleading baselines. Louie's BOTS speed run is a first step, measuring not only skill, speed, time savings, and accuracy, but also non-obvious requirements like budget caps. We are excited for new challenges in the coming months. On a personal note, an urgent priority for our team is easing the massive stress on security teams and their families, especially on defenders struggling with budget cuts . One government leader shared they routinely follow up their regular day with additional hours in the evening reviewing the day's incidents, and dreads when those turn into overnight crises. Easing these processes is more of an essential duty than a product feature. Ultimately, our work with genAI investigations isn't about replacing analysts, but transforming how people and machines work together. From cybersecurity to fraud to healthcare to financial trading, operational systems are freeing analysts from low-level work to managing agents that continuously learn under data flywheels. Excitingly, just as "Vibes Coding" developer tools like @cursor_ai and GitHub Copilot are revolutionizing software engineering at an unprecedented rate of adoption, we have spent the last 2 years building "#VibesInvestigating" for analysts to manage their side of the AI revolution using more humane and integrated tools like AI notebooks. There is more to share: Stay tuned for the graph side of my keynote, takeways from our great speakers this year, and meanwhile, reach out if you want to exchange notes on genAI & graphs in security!

I'm increasingly doing something we're calling "Vibes Investigating" in the @louie_ai team (ht @silkspaceships ) This rethinks @karpathy’s "Vibes Coding", now for data - think operations, incident response, fraud, SRE, logs, data science I make requests, see results, adjust, and repeat: No manually writing database queries, hand-coding data transforms, or fiddling with plotting libraries At the end, I trash it as I would a Splunk/Google search result, or I share my AI notebook just as I would a regular Google document or Python notebook Some recent examples: - Pairing session for a high-stakes lawsuit where we edited visualizations and analyses on-the-fly. This skipped a week of back-and-forth follow-up Slack messages & calls. - Quickly identifying and running some statistical analyses for the same case. Ex: median absolute deviation instead of the standard. - Exploring a logs dump to map a cyber pen test team’s activity, and then remixing the best parts into an account 360 dashboard. Think big join queries that are frustrating to code but easy to describe. I’ve been surprisingly OK with the AI messing up As we build @louie_ai and I use it for my own work, I'm thinking a lot more about Vibes Investigating. What's working, differences with software-centric vibes flows vs data-centric, and dovetailing with automation as we bring AI to operations. Curious what others are seeing and thinking about here! (+, DM if at #RSAC / graph the planet next week!) tx for discussions & inspiration over last year+ - @vicfcs @dawnsongtweets @matei_zaharia @anthonygtellez @Cyb3rWard0g @simonw

Google’s biggest-ever $32B #Wiz cyber acquisition is so big that genAI news is ho-hum despite it being #Nvidia #GTC week... Or so it seems: As a CEO building deep tech right in the middle of all these things for years now, first with @Graphistry and now also @LOUIE_AI , the real story to me isn’t the future of cloud security. It’s cloud security **AI**. My three 🤔 behind this: 1️⃣ Graph is the security intelligence layer Wiz's internals look similar to what top security teams do, whether it's one of the top 3 cloud providers or a three letter agency: they understand risk isn’t about asset lists, it’s about the relationships between them. Core Wiz tech tracks cloud physical and logical assets as a graph. Underneath it all? One of our favorite partners, @awscloud #AmazonNeptune. Beyond Wiz's cloud asset tracking, we work with customers every day as they extend this concept to their other assets like on-prem devices, and at the next magnitude of intensity of understanding dynamic event activities. 2️⃣ Google is doubling down on security data tech Chronicle (Google’s cloud SIEM) and Google Cloud don’t just want to secure infrastructure; they want to own the entire security data layer. Compliance, attack surface management—those are just applications of a much bigger shift. Wiz buys Chronicle a semantic asset layer into other clouds, as well as their customers. 3️⃣ AI for security is the end game The next wave isn’t just asset mapping and continuous compliance —it’s making sense of it all: Quickly, correctly, and automatically. The more the @Louie_ai team works with our customers on AI investigation copilots & autonomous investigation agents, the clearer I'm seeing it. Cleaning up the security intelligence layer is the difference between an AI stumbling through a swamp vs speeding down a highway. Graph is great for analysts today, and it is paving the way for AIs in the future. I've come to appreciate the best M&A deals are literally free. The stock jump covers the cost so you even make money. That’s not happening here, so the payback period will take time. For everyone in our community, however, this is a massive vote of confidence in graph, AI, and what is happening in investigation & security tech. @pacoid @pgosavi7056 @bigdata @jamescham @vicfcs @anton_chuvakin

Kick off the weekend with a new @LOUIE_AI remote role opening! We need to scale, and a big part is fullstack development to advance the frontend+backend stack (Also a fun chance to look inside how a top genAI product works!) Contract-to-hire w/ continuation options 👉

Next genAI security talks announced! - Fight misinfo with LLMs @blackbird_ai - Security copilots UX @amcdnl - KG + vector DB @awscloud - LLM function calling @JiantaoJ @Berkeley_EECS + 9 more on AI+sec! Link below. See you soon! + @bechbd @joshua_saxe @mt_lattices @williamlin

Big news: #GraphThePlanet2024 is ON! The 2024 theme is #GenAI #Security. We're running live in SF on May 7th (RSA week) + free live stream. Some of the amazing genAI speakers include: @adversariel (@runsybil , @OpenAI ), @joshua_saxe (@Meta , @Sophos ), @mt_lattices (@SymmetrySystems , @UTAustin ), Sean Griffin (@disastertechinc , former NSC @Whitehouse), and @jamescham (@BloombergBeta ). Graph the Planet gives leaders at the intersection of AI and digital defense a place to converge and share. We structure it as a curated day of fast-moving talks, panels, & breakouts with plenty of time to chat. Every year, we bring together senior digital crime practitioners (cyber, fraud, infowar), executives, deep tech creators, startup founders, & researchers working at the edge of what is currently possible. While a closed event, we make it free to attend, and reserve tickets so community members can sign up. New this year, we'll also have genAI startup demo stations and an evening genAI reception put on with our friends at @identity_aka. I encourage signing up early so we can get you a spot! -> for site info & signup!

Get ready! 🧑‍🔬🔬🤖🎇

GenAI is redefining dashboarding. For the latest @louie_ai video, I can finally start sharing our work with @disastertechinc + @DODCDAO to progress beyond the sea of dashboards no one uses for cyber, emergency response, crime, supply chain: We can now use far fewer views & tools by making them much more useful. When someone wants to drill more... they can simply ask! This clip shows why even non-technical users can kick off powerful AI questions against the 50K+ news organizations and social media firehoses. Now, within 30s of news breaking on the internet, an analyst can ask simple questions and get back interactive visualizations and intelligent summaries. This demo shows Twitter/News=> @OpenSearchProj , and we're doing the same thing with @splunk , @databricks , @awscloud Neptune, and more. It's not just dashboarding - our early users are working with us to do exactly the same kind of shift in continuous monitoring, alerting, customizable sitreps, and investigation automation. We've been busy bees over the last year with our early users and are only now coming up for air, so for more info, stay tuned here + signup on the @louie_ai site.

Investigations are a team sport! I've started sharing @LOUIE_AI 's new Multiplayer Mode, and if you look at the video below, it almost looks *too* easy, so I want to unpack this a bit. Live collaboration means it's now easy to do flows like: - Start talking to some @splunk / @databricks / @OpenSearch/ @PyData - Invite someone in from your Slack channel in to live view/edit a bit with you - Save the notebook url, and pick it up again later Crazily, Google docs & sheets both turned 18 (!), yet most analytics tools are still in the mode of preventing live collaboration, or only faking it, like disallowing more than one cell to be active at a time. We've been using genAI to rethink the data experience, and that has given us a chance to right a lot of wrongs even without the AI part. As another example here, Louie bakes in the data instead of deleting it. Resuming your work doesn't start with 15 minutes of fiddling with how to rerun an old notebook, and getting a quick look at it or to grab a data export, you can just reopen it at any time and go. And... that's all before we get into the genAI bits. If you haven't yet, signup at louie_ai to catch updates like this, and if you'll be in SF for @RSAConference , let us know!

Collaborative #GenAI analytics & dashboarding is here! Video on shows publishing an interactive #dashboard, starting from a private chat with @louie_ai on #Splunk alerts This one walks through the secure collaboration side, which is already key for our enterprise & gov users. Next one will dig into what we're doing for genAI dashboarding. For now, follow here or signup on the louieAI site. Happy graphing!