Skip to content
Automating Threat Intelligence Using Airflow with Karan Alang episode artwork

EPISODE · Mar 12, 2026 · 22 MIN

Automating Threat Intelligence Using Airflow with Karan Alang

from The Data Flowcast: Mastering Apache Airflow ® for Data Engineering and AI · host Astronomer

In this episode, Karan Alang, Principal Software Engineer at Versa Networks, joins the conversation to discuss how Airflow can be used to automate threat intelligence in modern cybersecurity environments. He explains the growing scale of cloud computing, the profitability of hacking and the shortage of SOC analysts. Karan also outlines a novel architecture that combines Airflow, XDR, graph databases and LLMs to orchestrate automated threat detection and response. Key Takeaways: 00:00 Introduction. 05:00 Organizations face massive log volumes and a shortage of SOC analysts. 07:00 The solution integrates Airflow, XDR, Neo4j graph databases and LLMs into one architecture. 08:00 MITRE ATT&CK provides a global framework for mapping tactics and techniques. 11:00 Airflow acts as the orchestration backbone for ingestion graph transformation and LLM workflows. 13:00 Graph databases provide a full relationship view of attackers’ systems and entities. 14:00 LLMs automate mapping activity to MITRE ATT&CK and assign explainable risk scores. 17:00 Traditional signature-based detection allows lateral movement and exfiltration before teams can react. 18:00 End-to-end automation is essential to mitigating modern cybersecurity threats. 20:00 Future opportunities include deeper LLM integration as first-class citizens within Airflow. Resources Mentioned: Karan Alang https://www.linkedin.com/in/karan-alang-4173437 Versa Networks | LinkedIn https://www.linkedin.com/company/versa-networks Versa Networks | Website https://versa-networks.com Google Cloud Composer (Managed Airflow on GCP) https://cloud.google.com/composer Microsoft Defender XDR https://www.microsoft.com/es-es/security/business/siem-and-xdr/microsoft-defender-xdr Neo4j (Graph Database) https://neo4j.com MITRE ATT&CK Framework https://attack.mitre.org Thanks for listening to “The Data Flowcast: Mastering Apache Airflow® for Data Engineering and AI.” If you enjoyed this episode, please leave a 5-star review to help get the word out about the show. And be sure to subscribe so you never miss any of the insightful conversations. #AI #Automation #Airflow #MachineLearning

Episode metadata supplied by the publisher feed · Published Mar 12, 2026

Embed this episode

In this episode, Karan Alang, Principal Software Engineer at Versa Networks, joins the conversation to discuss how Airflow can be used to automate threat intelligence in modern cybersecurity environments. He explains the growing scale of cloud computing, the profitability of hacking and the shortage of SOC analysts. Karan also outlines a novel architecture that combines Airflow, XDR, graph databases and LLMs to orchestrate automated threat detection and response. Key Takeaways: 00:00 Intr...

Distinct summary based on available episode metadata or transcript content.

Ready to play

Automating Threat Intelligence Using Airflow with Karan Alang

0:00 22:14

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

No similar episodes found.

No similar podcasts found.

Frequently Asked Questions

How long is this episode of The Data Flowcast: Mastering Apache Airflow ® for Data Engineering and AI?

This episode is 22 minutes long.

When was this The Data Flowcast: Mastering Apache Airflow ® for Data Engineering and AI episode published?

This episode was published on March 12, 2026.

Can I download this The Data Flowcast: Mastering Apache Airflow ® for Data Engineering and AI episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.
URL copied to clipboard!