Operations | Monitoring | ITSM | DevOps | Cloud

In this Black Hat talk, Nicole Beckwith introduces APEX (Adversarial Pattern Extraction and Correlation), a detection framework—not a Cribl product—that clusters TTP-based signals around entities to support behavioral detection. It is intended for security practitioners, SOC and detection teams, and threat hunters who want to learn how to use raw telemetry or OCSF data, TTP chaining, time windows, criticality, and cross-correlation to detect behavior beyond static indicators and rule-count coverage.

Watch the full episode: MCP vs CLI: Does it even make a difference? Live Laugh Logs ep. 3.

Ingestion stops, and you start reading system tables by hand to find out why. This run checks disk, merges, and replication across every replica first.

3 a.m., the pager fires, and the runbook describes a service that shipped three versions ago. Ask the agent what the cluster actually has instead. Runbooks go stale because clusters change faster than documentation does. Every deploy, every new service, every renamed alert widens the gap between what is running and what is written down.

1,133 requests failed on one bad commit. The patch and the regression test are already written by the time anyone is asked to read the exact diff. This demo runs AURA as one step inside a Temporal workflow, alongside Codex. A GET request against a product catalog service goes from success to HTTP 500, and ClickHouse records the version, commit, trace ID, and exact error for every request. By the time AURA investigates, all 1,133 requests on that version have failed.

On this episode of Masters of Data, we dig into what happens when AI actually delivers on its promise to eliminate busywork, and explore why removing the toil doesn't feel like the win everyone expected. We make the case that repetitive tasks build the intuition, pattern recognition, and muscle memory people need to do the harder work well. Security and engineering leaders rethinking how much triage and busywork to hand off to AI will find plenty to chew on here, especially anyone staring down a task list where every single item feels like the hardest one.