Keegan Dubbs

Cyberattacks are no longer just human-operated. AI-driven threats now move at machine speed, exploiting gaps across systems while your SOC is still triaging yesterday's alerts. Traditional SIEMs weren’t built for this reality: they force painful trade-offs between data volume, retention and cost, leaving security teams flying blind with only a fraction of their telemetry in view. In this session, we’ll take you inside Lakewatch, Databricks’ open, agentic SIEM built for machine-speed defense. We’ll start with the “why”: what motivated us to build something fundamentally different. Then we’ll demo how Lakewatch unifies 100% of your security, IT and business telemetry in one governed environment using open formats and Unity Catalog, with no costly duplication and no vendor lock-in. You’ll see how embedded AI agents powered by Genie Code automate threat detection and response at machine speed, and we’ll close with an exclusive peek at the roadmap and what’s coming next. Whether you’re evaluating your current SIEM, dealing with runaway data costs or looking to modernize your SOC on your existing Databricks investment, this session is your practical starting point. Key takeaways: - Why…

Bringing AI/BI to every business user starts with getting security, access and governance right. In this session, we’ll walk through the latest best practices for configuring Databricks accounts, setting up workspaces, and managing authentication protocols to enable secure and scalable onboarding. Whether you're supporting a small team or an entire enterprise, you'll gain practical insights to protect your data while ensuring seamless and governed access to AI/BI tools.

Effective Identity and Access Management (IAM) is essential for securing enterprise environments while enabling innovation and collaboration. As companies scale, ensuring users have the right access without adding administrative overhead is critical. In this session, we’ll explore how Databricks is simplifying identity management by integrating with customers’ Identity Providers (IDPs). Learn about Automatic Identity Management in Azure Databricks, which eliminates SCIM for Entra ID users and ensures scalable identity provisioning for other IDPs. We'll also cover externally managed groups, PIM integration and upcoming enhancements like a bring-your-own-IDP model for Google Cloud. Through a customer success story and live demo, see how Databricks is making IAM more scalable, secure and user-friendly.