Criblcon background image

Your telemetry data, your rules.

Criblcon Logo

Moscone Center | San Francisco, CA

November 17-21, 2025

Visit Booth #5514 for Demos, Swag, & Giveaways!

Claim your gift!

Grab your 1:1 with Cribl!

Meet Cribl at Microsoft Ignite to discover how you can streamline data onboarding and enhance detection and response. Gain AI-powered efficiency and human-verified accuracy in your Microsoft deployments. 

What’s in it for you?

  • Rapid onboarding of third-party data to your Microsoft environment

  • Actionable intelligence at scale with Cribl’s AI-powered workflows

  • Future-proof security and analytics to cut costs and keep data accessible across Microsoft and multi-cloud environments.

Come see how Cribl helps you power through the noise — starting with a free MagSafe Light-Up Power Bank. Attend a meeting, get your gift!

*Restrictions apply

RSAC - About - Image

Beyond the Booth

The Cribl View

Join the Cribl team for a relaxing Happy Hour at our San Francisco headquarters. We’re conveniently located just an 8-minute walk from the Moscone Center.

Stop by on Tuesday, November 19th, between 5:00 pm and 7:00 pm, for drinks, appetizers, and great conversation. We’ll be hosting on our office patio on the 13th floor, offering a stunning, exclusive view of the San Francisco skyline.

Cribl Rooftop
Yale New Haven Healthcare Logo

Speaking Sessions

How Yale New Haven Health modernized security with Sentinel and Cribl

Unexpected spikes in log volume left Yale New Haven Health, Connecticut's largest healthcare system, struggling with soaring SIEM costs and operational inefficiencies. In this session, hear how the team used Cribl to cut log volume by 40%, centralize data telemetry from 30k+ endpoints, and accelerate migration to Microsoft Sentinel in just 2 weeks. Learn how to control costs, streamline operations, and strengthen security posture with a modern telemetry data management strategy.

Speakers:
- Kam Amir, Dir. of Technical Alliances, Cribl
- Robert Arbuckle, Security Analyst III, Yale New Haven Health

NO NOISE, NO WASTE

Unlock the full power of Microsoft Sentinel

Cribl enhances Microsoft Sentinel with a flexible data pipeline that simplifies your migration and integration of diverse security data sources. 

With Cribl Stream, you can ingest, transform, and route third-party data into Sentinel's required formats without complex configurations. 

Route high-value security data to Sentinel for real-time analysis, and send lower-value data to cost-efficient storage, keeping data accessible for maintaining compliance and controlling costs.

No noise. No waste. Just clean, actionable telemetry exactly where you need it.

Visit Booth #5514 at Ignite to see Cribl in action.


Customer Case Study

How the University of Pittsburgh Streamlined Security Data Processing with Cribl

The University of Pittsburgh used Cribl to parse, filter, and compress about 4TB of daily data for their Microsoft Sentinel migration, drastically cutting the amount sent to Sentinel and achieving significant cost savings—a top priority for leadership given high ingestion costs.

“Compared to our previous setup, Cribl has significantly improved our data management, making operations smoother. We’re a small team with extensive responsibilities, so Cribl has been an invaluable asset.”
Richard McIverSenior Security Engineer, University of Pittsburgh

68 Days

Successful migration from Splunk to Microsoft Sentinel
Read case study

Resources

Explore more

augument-your-siem-with-ms-sentinel.png
Solution Brief

Augment Your SIEM with Microsoft Sentinel, Azure Data Explorer, and Cribl

Cribl_Packs_a_punch.png
BLOG

Cribl Packs a Punch: Unpacking the Integration with Microsoft Azure Sentinel with Cribl Source and Destination Packs

Accelerate SIEM Migrations to Sentinel with Cribl
Video

Accelerate SIEM Migrations to Sentinel with Cribl