We will detail our experiences in using hadoop and advanced analytics to provide new security insight to the enterprise. Emphasis will be placed on how the pervasive use of netflow across external facing environments provides descriptive context. As well as how inclusion of additional telemetry sources from platforms give unique insight and combine well with netflow analysis.