Dave Herrald

In the AI era, security is fundamentally a data problem. As cyberattacks shift from human-operated to machine-scale autonomous agents, traditional security architectures have hit a breaking point, forced into a "fidelity trade-off" between spiraling costs and dangerous visibility gaps. Join us for the Cybersecurity Industry Forum to discover how Databricks is disrupting the legacy SIEM market with Lakewatch, the industry’s first open, agentic SIEM built on the security lakehouse. This 90-minute session explores how to “fight fire with fire” by deploying swarms of defensive AI agents to meet machine-speed attackers. We will dive into the architectural shift required to unify security, IT, and business data into a single, governed environment, eliminating the “ingestion tax” and enabling petabyte-scale detection and response at a fraction of the cost of legacy providers. Hear from security innovators and Lakewatch design partners who are moving beyond experimental AI to operationalize agentic security at scale. Learn how to leverage open formats (OCSF) and “Detection-as-Code” to build a proactive, high-velocity SOC that identifies threats in minutes, not days.

For decades, security investigations have required equal parts query-language incantations, instinct, and raw persistence. Lakewatch and Genie use AI to change the game, allowing analysts to investigate by simply asking questions in natural language, extracting patterns, pivoting, and getting results fast. In this session, we'll demonstrate "vibe investigating" using Genie against real-world security datasets. We'll uncover multi-stage attacks including prompt injection, credential theft, C2 beaconing, lateral movement, and a few more surprises! We'll show the full investigation arc — establishing baselines, detecting anomalies, pivoting across data sources, and building attack timelines. No query languages — just questions, answers, and a faster path to results. Attendees will leave with practical patterns for using Lakewatch Genie, crafting effective investigation prompts and supercharging their security investigations.