From Data to Decisions – Making Investigations Work in the AI SOC

In this episode of the SecOps Impact Interview Series, I sat down with Monzi Merza, CEO and co-founder of Crogl. Monzi has walked almost every path in security, from research in U.S. nuclear labs to building security at Splunk and Databricks, to now helping teams rethink how investigations actually get done. We talked about what really matters when you move past the marketing slides: • Connecting fragmented data and why a knowledge graph is the backbone of any serious AI SOC • Response plans that analysts can read, customize, and trust (not black-box playbooks that break at the first change) • Investigations and hunts where speed isn’t the metric it’s about depth, consistency, and asking the right questions • Feedback loops that make the system smarter every time an analyst touches it