Wed. November 18 | 11AM PT / 2PM ET

AI-Powered Investigations in Practice: How Security Teams Can Hunt Threats Faster

November 18, 2026

Save your spot

AI is everywhere in security right now, but can it actually help you catch the bad guys faster? And more importantly, can you trust what it tells you?

Join us for a behind-the-scenes look at how Cribl’s own security team puts Cribl Search’s AI Investigator to work hunting threats, chasing down suspicious activity, and getting to the bottom of incidents. We’ll share real-world lessons, practical query and prompt tips, and a live demo that shows the Investigator in action - from gathering evidence to connecting the dots, with humans still in the driver’s seat.

We’ll also dig into what makes an AI investigator worth trusting. How accurate is it? How many false alarms does it raise? How fast and expensive is it to run? And how do you know which models are up to the job? That’s where Sec-IT Bench and AI benchmarking come in. Learn how to evaluate model performance, understand the trade-offs, and figure out what works best for your security workflows.

You’ll learn how to:

  • Apply practical AI-assisted threat hunting and investigation workflows, including effective query and prompt strategies.

  • See how Cribl’s security team applies AI Investigator to real-world threat hunting.

  • Understand where AI can speed up investigations, and where human expertise and oversight remain essential.

  • Use benchmarking and research to make more informed decisions about AI in the SOC.

Walk away with practical tips for putting AI to work in your SOC, a clearer picture of what AI can (and can’t) do, and new ways to hunt threats and investigate with confidence.

Meet the Experts

Aaron Zamora
Aaron ZamoraPrincipal Technical Marketing Engineer
Aaron Zamora
Aaron ZamoraPrincipal Technical Marketing Engineer
Alexandria Crusco
Alexandria CruscoStaff Security Engineer
Alexandria Crusco
Alexandria CruscoStaff Security Engineer

Alex Crusco is a Staff Security Engineer at Cribl, where she specializes in Threat Operations and Security Engineering. With broad expertise spanning both the strategic and technical dimensions of security, Alex brings a grounded, practitioner-focused perspective to the challenges modern security teams face. She is passionate about building resilient security programs and translating complex threats into actionable defense strategies.

Sasikanth Vadlamudi
Sasikanth VadlamudiStaff Product Manager
Sasikanth Vadlamudi
Sasikanth VadlamudiStaff Product Manager

Sasikanth Vadlamudi is a product leader with more than 20 years of experience building the observability, telemetry, and digital-operations platforms that keep large-scale software reliable. Currently a Staff Product Manager focused on search and AI-assisted investigation at Cribl, he has led products across enterprise observability pipelines (Mezmo), endpoint digital-experience monitoring at global scale (Palo Alto Networks / Prisma SASE), and full-stack observability and AIOps for Fortune 500 e-commerce. His work spans real-user monitoring, alert correlation and noise reduction, incident response, and telemetry cost optimization.

Cribl, the AI Platform for Telemetry, empowers enterprises to manage and analyze telemetry for both humans and agents with no lock-in, no data loss, no compromises. Trusted by organizations worldwide, including half of the Fortune 100, Cribl gives customers the choice, control, and flexibility to build what’s next.

We offer free training, certifications, and a free tier across our products. Our community Slack features Cribl engineers, partners, and customers who can answer your questions as you get started and continue to build and evolve. We also offer a variety of hands-on Sandboxes for those interested in how companies globally leverage our products for their data challenges.

get started

Choose how to get started

See

Cribl

See demos by use case, by yourself or with one of our team.

Try

Cribl

Get hands-on with a Sandbox or guided Cloud Trial.

Free

Cribl

Process up to 1TB/day, no license required.