Ask your SIEM who used AI at work yesterday, and you’ll get an answer measured in domains and byte counts. Ask what those people were actually doing, and the trail goes cold. That’s the honest state of most enterprise AI programs right now: plenty of traffic, very little context.