“I think right now we’re looking at how to use an AI where we could triage so much more,” David Imbordino, the head of the agency’s cybersecurity directorate, said on a panel with officials from the “Five Eyes” intelligence alliance at the Billington Cybersecurity Summit in Washington, D.C.

The agency ingests vast amounts of data every day, including intercepted foreign communications and electronic signals from radar and weapons systems. Imbordino’s directorate, in particular, focuses on both intelligence collection and cyberdefense.

“Volume has always been a problem,” he said, but AI has raised the prospect of getting “to the nuggets” faster than before. In the near future, analysts will likely use AI tools to look at disparate pieces of information and evaluate them “much more quickly” than current methods that can take days or weeks, Imbordino added.

His remarks highlight one of many ways the nation’s cyber and intelligence agencies are putting AI to work and show the omnipresent role such systems will play in day-to-day work in spy offices.

NSA has also taken a leading role in the Trump administration’s AI policy efforts as increasingly powerful tools promise to help defenders find and fix software flaws while giving hackers new ways to break into networks. Late last month, NSA deputy director Tim Kosiba said that the agency wants access to a wide range of models and is engaging heavily with frontier AI companies. 

The agency is helping to implement a sweeping June executive order directing national security agencies to create classified tests for determining when AI systems have developed sufficiently advanced hacking capabilities to warrant additional scrutiny. The order calls, in part, for a voluntary arrangement through which developers can give the federal government access to qualifying models for as many as 30 days before releasing them to other trusted partners.

Ellis credited the agency’s Center for Cyber Intelligence with building what he called a “flawless intelligence picture” for Operation Absolute Resolve, the U.S. operation that seized Maduro.

“If you look at [Absolute Resolve], you know that operation was only made possible by a flawless intelligence picture, and that flawless intelligence picture was built on cyber operations enabled by our CCI team,” Ellis said, speaking at the Billington Cybersecurity Conference in Washington, D.C. Without that intelligence, he said, the agency could not have helped U.S. forces locate and apprehend Maduro as quickly as they did.

The remarks offer a more detailed public picture of how CIA cyber prowess helped U.S. forces locate and capture Maduro, expanding on earlier accounts from officials that acknowledged support without explaining the agency’s entire contribution.

Joint Chiefs Chairman Gen. Dan Caine previously acknowledged Cyber Command’s participation in the efforts and credited the CIA, National Security Agency and National Geospatial-Intelligence Agency with supporting the Venezuela mission. He described months of intelligence collection on Maduro’s movements and daily routines, but did not directly identify the CIA cyber role Ellis outlined.

During the capture mission, multiple intelligence agencies established crisis action teams to support Special Operations Command and Southern Command. A U.S. official familiar with the operation previously said the NSA provided geolocation support and monitored communications and signals that could reveal troop movements or plans to activate radar.

Ellis discussed the operation in explaining the CIA’s recent decision to elevate CCI to a mission center, a change he said gave their cyber operators greater priority and helped align resources around intelligence needs.

The change has helped the agency “bring cyber operations to bear to solve these tough intelligence problems,” Ellis said. He did not specifically identify the systems targeted or explain how the cyber operations revealed Maduro’s location.

The CIA primarily executes and coordinates human intelligence gathering overseas, often done undercover. Officers recruit and manage foreign assets to clandestinely gather intelligence on areas like economics and terrorism threats. Much of that work has often involved the use of technology, including computer intrusions.