All posts Insight

Generative Graph Investigation

Say hello to the generative era of graph investigations!

Graphs are how we answer questions about relationships in our data. With the launch of GFQL, our accelerated graph query language, and Louie.ai, our agentic investigation platform, generative AI now works in Graphistry in ways other graph platforms cannot match.

Four themes drive the next release: Agentic graph reasoning, automation & learning, making graph investigations easy, and empowering application developers and personal coding agents. 

For those new to Graphistry, it is a GPU visual graph AI environment that runs on dataframes, files, and is often used with live queries against databases like Splunk, Databricks, and Kusto. The combination means you can do graph queries, analytics, and visualizations directly on your data live without moving it into a graph database first. 

 

 

The video above shows an analyst easily automating their investigation with plain natural language as they pull up a real graph of 2 weeks of network + device alerts and run commands like:

“”” Hey Louie,
– describe the bigger clusters
– visually highlight the central accounts in each
– assemble a background report on the accounts using our standard operating procedure and talking to Splunk, Kusto, and Databricks as needed
– link findings to databricks queries
“””

GRAPHS SHOULD BE EASY

Graphistry has grown many features over the years, each driven by real analyst scenarios. The example asks Louie to “highlight the central accounts,” and it runs a full graph analytics pipeline and colors the results using the new collections feature. No query language expertise nor UI experience required.

As we work with different analysts and design partners, we’re learning the different ways they want to put graph investigations into the hands of their teams and make the experience a lot easier.

AGENTIC GRAPH REASONING

The botsbench.com leaderboard measures Louie winning over Claude Code and OpenAI Codex by +19% on common iterative investigation tasks taken from professional analyst competitions. That is your new agent you can command to grind for you.

Difficult for most systems, the example shows Louie automating graph shaping, search, analytics, and textual reasoning, running different calculations on different subgraphs. It handles tasks that are inexpressible with graph databases and regular ChatGPT wrappers. For example, by being a full agent harness, Louie can reach data that lives across multiple external systems and APIs. Through Louie’s semantic layer and MCPs, the UI acts like a virtual graph into everything connected to Louie..

GFQL is fast. GPU acceleration covers the full graph pipeline: only GFQL can run entirely on the GPU for the fastest experience possible. As we announced earlier this week, GFQL is already raising the bar on community graph benchmarks like LDBC.

AUTOMATION AND LEARNING FOR TEAMS

Generative automation is a big unlock for teams facing tough investigations. The example above already shows it: Driven by a simple natural language command, Louie repeats an analysis step across every major cluster and top account.

Automations are easy to reuse, too, as shown by the instruction to follow a previously-saved standard operating procedure. Tell Louie to save the techniques you liked from a session into a skill file, then simply reuse and tweak it later. Behind the scenes, Louie is starting to learn these flows on its own – so analysts curate skills that need precision, and let Louie automatically handle the many smaller daily basics as they evolve.

Importantly, data is a team sport, so Louie brings rich sharing patterns with privacy controls built in. They both help collaborating within a team, and solve many of the security and compliance challenges facing putting AI agents in production.

MAKE GENERATIVE GRAPH EXPERIENCES YOUR OWN

We’re enabling new ways to bring Louie into your existing workflows.

For application developers with Louie access, continuing to embed Graphistry as you do today is enough: Your users immediately gain the new generative graph investigation capabilities. From there, bootstrap and guide what Louie knows and does through custom skill files. With Graphistry MCP support and prepackaged Graphistry skill files, teams building their own agent harnesses and copilots can manage Graphistry experiences from their own systems — including agent-to-agent guidance.

If you work from code agents or your own agent stack, you could already create graphs on the fly through our API and Graphistry skill files. MCP support now adds control of the live graph too, whether you’re actively exploring data or building new kinds of experiences.

With the new built-in generative AI extensions, choose Graphistry when:

  • Your graph is large enough that a static layout stops being readable — roughly 100,000 edges and up.
  • The relevant data spans several systems (a SIEM, a warehouse, an API) and you don’t want to ETL it into a graph database first.
  • You don’t yet know the question — the investigation needs several rounds of reshaping, reasoning, and rich visual analytics, not one query
  • You want an agent, a notebook, or your own application to drive the graph programmatically.
  • You need to embed interactive graph exploration inside a product you’re shipping.

NEXT STEPS

  1. Get a free account and api key at hub.graphistry.com
  2. Quickly start with the built-in file uploader or a client API:

The first version of generative investigations turns on for free for Graphistry Hub users in the coming weeks. We’ll also be turning them on as part of standard self-hosted enterprise, starting with Louie users, where deeper capabilities flipping over to Louie’s UI such as for skill management, database connectors, dashboarding, MCPs, and collaborative investigation. Self-hosting teams can reach out about the Louie EAP program.

We’d love to hear from you. If you’re at Black Hat or AI4 next week, come say hello at our BSides trainings on agentic investigation and logs2graphs, or our talk on frontier AI hacking evals. We’ll also be at SANS SF, LASCON Austin, BSides Canberra, and more, and you can always find us on the new Discord channel.

Notes from the trenches, monthly.

Graph analytics, GPU viz, and the occasional war story. No spam.