Elastic changes the SIEM game with AI-driven security analytics - Seite 2

“The attacks companies face are as constant as they are sophisticated, and with no lever to slow the deluge of signals, most security teams struggle to keep their heads above water,” said Santosh Krishnan, general manager of Security at Elastic. “Nearly 20% of our security customers already use our AI Assistant to boost team efficiency. Similarly, Attack Discovery will power productivity and supplement practitioner knowledge to speed up threat detection, investigation, and response. It helps your people — and SOC — succeed.”

Many SOCs have 1000s of alerts to sift through daily. Much of this work is dull, time-intensive, and error-prone. Elastic Security removes the need for such manual effort. Attack Discovery triages out the false positives and maps the remaining strong signals to discrete attack chains, showing how related alerts are part of an attack chain. Attack Discovery uses LLMs to evaluate alerts, taking into consideration severity, risk scores, asset criticality and more. By delivering this accurate and fast triage, analysts can spend less time sifting through alerts and more time investigating and addressing threats.

Since its release in 2019, Elastic Security has grown to include some of the industry’s most advanced analytics capabilities, including 100+ prebuilt ML-based anomaly detection jobs to detect previously unknown threats. Last year, Elastic introduced Elastic AI Assistant for Security to help SOC analysts with rule authoring, alert summarization, and workflow and integration recommendations.

Availability

Attack Discovery will be available to all customers with an Enterprise license as part of the Elastic 8.14 release.

Additional Resources

• Blog: Elastic Security evolves into the first and only AI-driven security analytics solution
• Blog: Tracing history: The generative AI revolution in SIEM
• Attend “Fight Smarter: Accelerate your SOC with AI-driven Insights” at RSA Conference

About Elastic

Elastic (NYSE: ESTC), the Search AI Company, enables everyone to find the answers they need in real-time using all their data, at scale. Elastic’s solutions for search, observability and security are built on the Elastic Search AI Platform, the development platform used by thousands of companies, including more than 50% of the Fortune 500. Learn more at elastic.co.

Elastic and associated marks are trademarks or registered trademarks of Elastic N.V. and its subsidiaries. All other company and product names may be trademarks of their respective owners.

View source version on businesswire.com: https://www.businesswire.com/news/home/20240506012000/en/

The Elastic Bearer and Registered Shares Stock at the time of publication of the news with a raise of +0,67 % to 98,84EUR on Tradegate stock exchange (06. Mai 2024, 15:04 Uhr).