While at Splunk .conf25, I unexpectedly ran into monzy merza! Monzy was at Splunk back when I started in 2012, and I learned a lot from him as he has a genuine and unique way of presenting information. Lately, Monzy had been busy as the Co-Founder and CEO of Crogl, Inc. which provides autonomous investigations on thousands of alerts per day, documents its work, and keeps everything private - from cloud, to on-premises, to air-gapped environments.

Transcript

Auto-generated captions, lightly cleaned. Speakers are not separately labeled.

Hey everybody, we’re out here at docom and I ran into Monzi. Now Monzi, you were around when I started Splunk many years ago and I learned a lot of security in Splunk from you and you’ve since left and created your own company. Can you give us a little bit more about what it is that you do and how you work with the Splunk platform? Well, >> it’s been a real homecoming to be back at at docom after after five years of of not being here. So really grateful for the whole community. Kogal works on tickets. It connects to your data when an alert comes into your to your ticketing system or your case managing system like Splunk Enterprise Security. >> Kro investigates the alert using the data that you have and tells you whether there’s a threat or or threat not found. The reason why we created Kro is we talked to lots and lots of customers and asked them what their hardest cyber security problem was and they said they’re just inundated with alerts that they know they have to investigate. They can’t filter these alerts out. So they have to investigate the alerts and they have to document these alerts. And then they said they also wanted their data and all their work to be private to them and they had data fragmented in lots and lots of places. And so Kro is able to connect to data no matter where your data lives and it’s able to operate on it. It’s able to investigate all the different use cases. It documents all of its work. And the best part about Kogal, it’s completely 100% private. So customers can deploy Krole in the cloud. They can deploy it on prem. They can even deploy it in an airgapped environment. >> So have a lot of customers especially from the Splunk world that are in very secure environments. How’s the question like they’re totally airgapped? Krole just works there, right? >> Yes. Kroal works in air environment is a fully self-contained compound AI system and uh they don’t they just deploy Krole by itself and there’s no external dependency. >> Yeah. So this just software that you deploy. Is that how it works? >> It’s so Thank you. So, Kroal is software and uh and and you can you can choose to deploy it on on on on secure operating systems like a Red Hat Stig or on a slightly more open operating system in the cloud like a like an Amazon uh like an Amazon Linux or any other cloud platform that you choose to deploy it on. >> And that’s really interesting information. I’m sure a lot of people want to know more. Where can I go learn some more about all your capabilities? >> Yeah, please go to www.coogle.com to kogle.com and uh and you can you can take a look at what we do and what the different use cases are for the customers. And if you heard.com, come see us. We’ll be happy to show you a demo. Right on. Well, thanks so much, Mont. [music] Appreciate it. This >> is great to see you.