Automating Threat Intelligence Using Airflow with Karan Alang

About this episode

Karan Alang discusses the use of Airflow to automate threat intelligence in cybersecurity.

In this episode, Karan Alang , Principal Software Engineer at Versa Networks , joins the conversation to discuss how Airflow can be used to automate threat intelligence in modern cybersecurity environments. He explains the growing scale of cloud computing, the profitability of hacking and the shortage of SOC analysts. Karan also outlines a novel architecture that combines Airflow, XDR, graph databases and LLMs to orchestrate automated threat detection and response. Key Takeaways: 00:00 Introduction. 05:00 Organizations face massive log volumes and a shortage of SOC analysts. 07:00 The solution integrates Airflow, XDR, Neo4j graph databases and LLMs into one architecture. 08:00 MITRE ATT&CK provides a global framework for mapping tactics and techniques. 11:00 Airflow acts as the orchestration backbone for ingestion graph transformation and LLM workflows. 13:00 Graph databases provide a full relationship view of attackers’ systems and entities. 14:00 LLMs automate mapping activity to MITRE ATT&CK and assign explainable risk scores. 17:00 Traditional signature-based detection allows lateral movement and exfiltration before teams can react. 18:00 End-to-end automation is…

People in this episode

Guest: Karan Alang

Topics covered

• cybersecurity
• threat intelligence
• automation
• Airflow
• cloud computing
• SOC analysts
• graph databases

Keywords

• threat detection
• cybersecurity automation
• Airflow architecture
• SOC analyst shortage
• graph databases
• LLMs
• MITRE ATT&CK

Mentioned in this episode

Organizations: Versa Networks, MITRE ATT&CK, Neo4j

Products: Airflow, XDR, LLMs

More episodes of The Data Flowcast: Mastering Apache Airflow ® for Data Engineering and AI

• Managing a Customer Analytics Platform with Airflow at Skimlinks · June 11, 2026 · 23 min
• Building a custom Tableau provider for Airflow at JLR · June 4, 2026 · 21 min
• Orchestrating 2,000 Airflow pipelines at Luiza Labs with Mateus Ferreira · May 28, 2026 · 33 min
• Enhancing DAGs for Data Processing with William Orgertrice III at Cargill · May 21, 2026 · 26 min
• Getting Into Data Engineering with Shrividya Hegde, Data and AI Engineer · May 14, 2026 · 28 min
• Orchestrating DBT With Cosmos and Airflow with Filip Kunčar at ShipMonk Product Development · May 7, 2026 · 25 min