There are important conceptual differences when applying these approaches to different cybersecurity use cases. Data science involves using fancy math to extract knowledge from data. Machine learning involves employing an algorithm to construct a model that is trained to recognize patterns by feeding (usually large amounts of) data into it. Artificial intelligence is a more abstract concept that can include interviewing subject matter experts and writing code to approximate their thought processes. An incident investigation begins with a particular premise such as a machine that is communicating with an external entity in what appears to be a command-and-control channel and progresses from there.”]
Source: https://www.csoonline.com/article/3290291/data-science-in-service-of-detection-vs-investigation.html