The answer to your security problems is locked in data stored in red team reports, text files, threat feeds, and infrastructure APIs with no way for you to bring them together. This talk introduces Attack Flo: a data structure to rationalize security data in paths rather than points. Any time you have actions, assets, and time, you can use Attack Flow to capture the 3C’s: Causality, Complexity, and Context. Whether you work security engineering, DFIR, red team, or strategic planning, come learn how Attack Flow improves finding, sharing, and taking action on your security data. Sure, not all security problems can be solved through better data science and better visuals. But it is a start.