Is it possible for the most paranoid industry in technology to productively share data? Two years ago I wrote a post about ML in information security. In it I cover what I think might be required to move past anomaly detection/alerting and closer to agents that can act in support of or in place of human operators. Since the time of writing, I’ve spent more time working in the industry and more time thinking about the direction the field is moving in and developed the beginnings of a gym environment for red teaming.