From Alert to Case: AI-Powered IoT Threat Investigation with Elastic

Join the Elastic Washington, D.C. User Group for an evening of technical talks, live demos, and networking at the Elastic Arlington office.

Alekya Kowta will demo an AI agent that investigates suspicious IoT traffic and opens a case in Elastic Security. We’ll also have a talk from Elastic, with speaker and topic details to come.
Come for the talks and stay for pizza, refreshments, and conversation with the local Elastic community.

Date and time
Tuesday, November 10, 5:30–7:30 p.m. ET

Location
Elastic Arlington Office
4100 Fairfax Drive, Suite 500
Arlington, VA 22203

Parking and transit

• The building’s garage is operated by Joyce Parking and is accessible from N. Randolph Street.
• Reserve parking through SpotHero.
• A Metro station is across the street.

Agenda

• 5:30 p.m. — Doors open, pizza, and refreshments
• 6:00 p.m. —From Alert to Case: AI-Powered IoT Threat Investigation with Elastic - Alekya Kowta (Software Engineer)
• 6:40 p.m. — Elastic talk · Speaker and topic TBD
• 7:20–7:30 p.m. — Networking

Talk abstracts
From Alert to Case: AI-Powered IoT Threat Investigation with Elastic
Alekya Kowta (Software Engineer)
When a security camera starts sending data to an unfamiliar server at 3 a.m., how do you tell whether it’s compromised?
In this live demo, Alekya will use real IoT traffic to show how ES|QL flags suspicious activity, how an AI agent checks the device’s normal behavior and looks for related activity, and how Elastic Workflows opens a case with the agent’s verdict and supporting evidence. She’ll also share how often the agent gets the verdict right and how its triage time compares with a manual investigation.