Robuta

https://www.elastic.co/blog/managed-security-service-providers Forward-looking MSSPs are moving to Elastic Security | Elastic Blog Elastic Security gives MSSPs the platform edge they need: resource-based pricing, built-in AI, and automation tools that scale operations without scaling... moving toelastic securityforwardlookingmssps https://www.elastic.co/blog/elastic-security-7-8-0-released Elastic Security 7.8.0 released | Elastic Blog Jul 20, 2020 - Experience Elastic Security 7.8, with Jira integration, an enhanced investigation UI, new out-of-the-box detection rules, and expanded data collection and... elastic securityreleasedblog https://www.elastic.co/blog/elasticon-global-security Elastic Security: Building the future of Limitless XDR | Elastic Blog See how Elastic Security is building the future of Limitless XDR (Extended Detection and Response) with innovations across SIEM, endpoint security, and cloud... building the futureelastic securitylimitlessxdrblog https://www.elastic.co/guide/en/security/8.17/rare-smb-connection-to-the-internet.html Rare SMB Connection to the Internet | Elastic Security [8.17] | Elastic to theelastic securityraresmbconnection https://www.elastic.co/guide/en/security/current/potential-ransomware-behavior-note-files-by-system.html Potential Ransomware Behavior - Note Files by System | Elastic Security [8.19] | Elastic by systemelastic securitypotentialransomwarebehavior https://www.elastic.co/customers/bank-leumi Bank Leumi deploys Elastic Security as its SIEM solution | Elastic Customers Bank Leumi selected Elastic Security as its SIEM solution to provide technical teams with Kibana dashboards that visualize data, detect threats, and defend the... bank leumielastic securitysiem solutiondeployscustomers https://www.elastic.co/blog/elastic-security-comprehensive-cloud-protection Leveraging Elastic Security for comprehensive cloud protection | Elastic Blog This post explores how Elastic Security stands out in managing cloud security with an integrated approach, as well as highlights its unparalleled adaptability... elastic securitycloud protectionleveragingcomprehensiveblog https://www.elastic.co/guide/en/security/8.17/multiple-vault-web-credentials-read.html Multiple Vault Web Credentials Read | Elastic Security [8.17] | Elastic elastic securitymultiplevaultwebcredentials https://www.elastic.co/guide/en/security/current/prebuilt-rule-8-19-6-installutil-process-making-network-connections.html InstallUtil Process Making Network Connections | Elastic Security [8.19] | Elastic network connectionselastic securityprocessmaking https://www.elastic.co/guide/en/security/8.19/gcp-storage-bucket-permissions-modification.html GCP Storage Bucket Permissions Modification | Elastic Security [8.19] | Elastic gcp storage bucketelastic securitypermissionsmodification https://www.elastic.co/guide/en/security/8.17/release-notes-header-8.4.0.html 8.4 | Elastic Security [8.17] | Elastic elastic security https://www.elastic.co/jp/blog/whats-new-elastic-security-8-6-0 Elastic Security 8.6: Improving investigation and response in cybersecurity | Elastic Blog Elastic Security 8.6 helps security practitioners investigate and respond to threats quickly at cloud scale with SIEM, cloud security, and endpoint security.... investigation and responseelastic securityimproving https://www.elastic.co/guide/en/security/current/parent-process-detected-with-suspicious-windows-process-es.html Parent Process Detected with Suspicious Windows Process(es) | Elastic Security [8.19] | Elastic elastic securityparentprocessdetectedsuspicious https://www.elastic.co/guide/en/security/current/prebuilt-rule-8-19-4-prebuilt-rules-8-19-4-appendix.html Appendix W: Downloadable rule update v8.19.4 | Elastic Security [8.19] | Elastic elastic securityappendixwruleupdate https://www.elastic.co/guide/en/security/current/unusual-execution-from-kernel-thread-kthreadd-parent.html Unusual Execution from Kernel Thread (kthreadd) Parent | Elastic Security [8.19] | Elastic elastic securityunusualexecutionkernelthread https://www.elastic.co/guide/en/security/8.17/gcp-storage-bucket-permissions-modification.html GCP Storage Bucket Permissions Modification | Elastic Security [8.17] | Elastic gcp storage bucketelastic securitypermissionsmodification https://www.elastic.co/elasticon/archive/2021/event/north-america/elastic-security-unified-protection-for-everyone Elastic Security: Unified protection for everyone | Elastic Feb 26, 2025 - Prevent, detect, and respond to threats with Elastic Security, free and open for analysts everywhere. Built on the Elastic Stack, Elastic Security powers the... elastic securityunifiedprotectioneveryone https://www.elastic.co/guide/en/security/8.19/manual-dracut-execution.html Manual Dracut Execution | Elastic Security [8.19] | Elastic elastic securitymanualdracutexecution https://www.elastic.co/blog/investigate-log4shell-exploits-with-elastic-security-and-observability Investigate Log4Shell exploits with Elastic Security and Observability | Elastic Blog As news of Log4shell emerged, security teams all around the globe scrambled to detect, mitigate and contain the vulnerability. This blog highlights how teams... elastic securityinvestigateexploitsobservabilityblog https://www.elastic.co/guide/en/security/current/prebuilt-rule-8-19-6-scheduled-tasks-at-command-enabled.html Scheduled Tasks AT Command Enabled | Elastic Security [8.19] | Elastic scheduled tasksat commandelastic securityenabled https://www.elastic.co/guide/en/security/current/potential-protocol-tunneling-via-yuze.html Potential Protocol Tunneling via Yuze | Elastic Security [8.19] | Elastic elastic securitypotentialprotocoltunnelingvia https://www.elastic.co/blog/siem-cloud-detection-and-response Elastic Security simplifies cloud detection and response | Elastic Blog Elastic Security combines CDR with SIEM to deliver crucial context, prioritized threat detection, and rapid response for a more efficient security posture.... cloud detection and responseelastic securityblog https://www.elastic.co/blog/airtel-managed-security-services-elastic-security Empowering businesses with Elastic Security at Airtel | Elastic Blog In this blog, we'll unravel the key features, benefits, and unparalleled security solutions that Airtel brings to its B2B customers and explore the... empowering businesseselastic securityairtelblog https://www.elastic.co/guide/en/security/8.17/discovery-of-domain-groups.html Discovery of Domain Groups | Elastic Security [8.17] | Elastic elastic securitydiscoverydomaingroups https://www.elastic.co/jp/blog/elastic-ai-fraud-detection-financial-services Transforming fraud detection: AI and Elastic Security in financial services | Elastic Blog Discover how Elastic uses AI and ML to revolutionize fraud detection in financial services. From real-time anomaly detection to predictive analytics, learn how... fraud detectionai andelastic securityfinancial servicestransforming https://www.elastic.co/security-labs Elastic Security Labs Elastic Security Labs empowers security teams across the globe with novel security intelligence research and free to use tools. elastic securitylabs https://www.elastic.co/guide/en/security/8.17/detections-permissions-section.html Detections requirements | Elastic Security [8.17] | Elastic elastic securitydetectionsrequirements https://www.elastic.co/guide/en/security/current/kubeconfig-file-creation-or-modification.html Kubeconfig File Creation or Modification | Elastic Security [8.19] | Elastic file creationelastic securitykubeconfigmodification https://www.elastic.co/webinars/technical-deep-dive-into-elastic-security-7.9 A technical deep dive into Elastic Security 7.9 | Elastic Videos Oct 22, 2020 - With the 7.9 release, Elastic Security now provides free, integrated endpoint security through the introduction of signatureless malware prevention and... technical deep diveelastic securityvideos https://www.elastic.co/kr/blog/investigate-log4shell-exploits-with-elastic-security-and-observability Investigate Log4Shell exploits with Elastic Security and Observability | Elastic Blog As news of Log4shell emerged, security teams all around the globe scrambled to detect, mitigate and contain the vulnerability. This blog highlights how teams... elastic securityinvestigateexploitsobservabilityblog https://www.elastic.co/blog/detect-credential-access-with-elastic-security Detect Credential Access with Elastic Security | Elastic Blog In this post, we detail a series of tactics for hunting with new data types and fields within Elastic and how to leverage Elastic Security to its fullest... credential accesselastic securitydetectblog https://www.elastic.co/guide/en/security/8.18/detections-permissions-section.html Detections requirements | Elastic Security [8.18] | Elastic elastic securitydetectionsrequirements https://www.elastic.co/guide/en/security/8.18/attack-discovery.html Attack Discovery | Elastic Security [8.18] | Elastic elastic securityattackdiscovery https://www.elastic.co/guide/en/security/8.17/command-and-scripting-interpreter-via-windows-scripts.html Command and Scripting Interpreter via Windows Scripts | Elastic Security [8.17] | Elastic elastic securitycommandscriptinginterpretervia https://www.elastic.co/guide/en/security/8.17/windows-event-logs-cleared.html Windows Event Logs Cleared | Elastic Security [8.17] | Elastic windows event logselastic securitycleared https://www.elastic.co/guide/en/security/8.18/network-page-overview.html Network page | Elastic Security [8.18] | Elastic elastic securitynetwork https://www.elastic.co/guide/en/security/current/prebuilt-rule-8-19-4-potential-port-scanning-activity-from-compromised-host.html Potential Port Scanning Activity from Compromised Host | Elastic Security [8.19] | Elastic port scanningelastic securitypotentialactivity https://www.elastic.co/blog/elastic-security-kyndryl How Elastic Security and Kyndryl deliver faster, smarter managed SOC operations | Elastic Blog Discover how Elastic Security's AI-powered detection integrates with Kyndryl's global SOC network to transform threat response. Learn how this alliance reduces... elastic security https://www.elastic.co/guide/en/security/8.17/attempted-bypass-of-okta-mfa.html Attempted Bypass of Okta MFA | Elastic Security [8.17] | Elastic elastic securityattemptedbypassoktamfa https://www.elastic.co/docs/solutions/security/dashboards Elastic Security dashboards | Elastic Docs The Elastic Security app's default dashboards provide useful visualizations of your security environment. To view them in Elastic Security, select Dashboards... elastic securitydashboardsdocs https://www.elastic.co/elasticon/archive/2020/event/italy/elastic-security-enterprise-protection-built-on-the-elastic-stack Elastic Security: protezione di livello Enterprise basata sullo stack Elastic | Elastic Nov 3, 2022 - Elastic Security fornisce un sistema globale per la prevenzione, raccolta, rilevamento e risposta agli attacchi. Impara come spiazzare gli avversari con una... elastic securityprotezionedilivelloenterprise https://www.elastic.co/guide/en/security/8.17/web-application-suspicious-activity-unauthorized-method.html Web Application Suspicious Activity: Unauthorized Method | Elastic Security [8.17] | Elastic web applicationsuspicious activityelastic securityunauthorizedmethod https://www.elastic.co/guide/en/security/8.17/user-account-creation.html User Account Creation | Elastic Security [8.17] | Elastic user accountelastic securitycreation https://www.elastic.co/guide/en/security/current/prebuilt-rule-8-19-4-aws-s3-static-site-javascript-file-uploaded.html AWS S3 Static Site JavaScript File Uploaded | Elastic Security [8.19] | Elastic static siteelastic securityawsjavascript https://www.elastic.co/guide/en/security/8.17/process-created-with-a-duplicated-token.html Process Created with a Duplicated Token | Elastic Security [8.17] | Elastic created withelastic securityprocesstoken https://www.elastic.co/guide/en/security/current/backup-deletion-with-wbadmin.html Backup Deletion with Wbadmin | Elastic Security [8.19] | Elastic elastic securitybackupdeletionwbadmin https://www.elastic.co/guide/en/security/current/prebuilt-rule-8-19-7-potential-credential-access-via-windows-utilities.html Potential Credential Access via Windows Utilities | Elastic Security [8.19] | Elastic credential accesswindows utilitieselastic securitypotentialvia https://www.elastic.co/guide/en/security/8.19/potential-sap-netweaver-exploitation.html Potential SAP NetWeaver Exploitation | Elastic Security [8.19] | Elastic sap netweaverelastic securitypotentialexploitation https://www.elastic.co/docs/solutions/security/ai/agent-builder/agent-builder Agent Builder for Elastic Security | Elastic Docs Learn how Elastic Agent Builder works with Elastic Security. agent builderelastic securitydocs https://www.elastic.co/fr/blog/airtel-managed-security-services-elastic-security Empowering businesses with Elastic Security at Airtel | Elastic Blog In this blog, we'll unravel the key features, benefits, and unparalleled security solutions that Airtel brings to its B2B customers and explore the... empowering businesseselastic securityairtelblog https://www.elastic.co/pt/webinars/intro-to-elastic-security-how-to-shrink-mttd Intro to Elastic Security: How to shrink MTTD | Elastic Videos Aug 28, 2024 - Elastic Security unites two critical components of cybersecurity: endpoint security and SIEM. Together, the solution provides prevention, collection,... intro toelastic securityshrinkvideos https://www.elastic.co/fr/blog/elastic-security-7-8-0-released Elastic Security 7.8.0 released | Elastic Blog Jul 20, 2020 - Experience Elastic Security 7.8, with Jira integration, an enhanced investigation UI, new out-of-the-box detection rules, and expanded data collection and... elastic securityreleasedblog https://www.elastic.co/guide/en/security/current/prebuilt-rule-8-19-7-microsoft-management-console-file-from-unusual-path.html Microsoft Management Console File from Unusual Path | Elastic Security [8.19] | Elastic management consoleelastic securitymicrosoftfile https://www.elastic.co/customers/region-midtjylland Region Midtjylland secures 1.3 million citizens with Elastic Security | Elastic Customers Region Midtjylland uses Elastic Security to protect patient data, processing 5TB daily across 3,000 servers. See how it leverages AI for faster threat... region midtjyllandelastic securitysecures https://www.elastic.co/blog/security-prebuilt-rules-editing Elastic Security simplifies customization of prebuilt SIEM detection rules | Elastic Blog Learn about the prebuilt rule editing capabilities that allow you to get even more value from out-of-the-box SIEM detection rules.... elastic securitydetection rulescustomizationprebuiltsiem https://www.elastic.co/resources/security/report/av-comparatives-endpoint-protection-response?plcmt=en-nav Elastic Security: Maximizing protection, minimizing cost | Elastic Elastic scores 99.3% in AV-Comparatives' Endpoint Prevention and Response Report, stopping advanced threats early, with zero workflow disruption and low cost... elastic securitymaximizingprotectionminimizingcost https://www.elastic.co/guide/en/security/8.17/suspicious-pdf-reader-child-process.html Suspicious PDF Reader Child Process | Elastic Security [8.17] | Elastic pdf readerelastic securitysuspiciouschildprocess https://www.elastic.co/guide/en/security/8.17/prebuilt-rule-1-0-2-threat-intel-indicator-match.html Threat Intel Indicator Match | Elastic Security [8.17] | Elastic threat intelelastic securityindicatormatch https://www.elastic.co/guide/en/security/8.19/multiple-external-edr-alerts-by-host.html Multiple External EDR Alerts by Host | Elastic Security [8.19] | Elastic by hostelastic securitymultipleexternaledr https://www.elastic.co/docs/reference/integrations/elastic_security Elastic Security | Elastic integrations Elastic Security is a free and open solution that helps detect, investigate, and respond to threats using data from endpoints, cloud, and network sources... elastic securityintegrations https://www.elastic.co/webinars/adversary-emulation Adversary Emulation with Elastic Security | Elastic Videos Nov 20, 2024 - The practice of running Adversary Emulation engagement exercises is becoming more widely adopted within modern security teams. The collaborative effort of... adversary emulationelastic securityvideos https://discuss.elastic.co/c/security/83 Latest Elastic Security topics - Discuss the Elastic Stack Integrate free and open SIEM, and endpoint, to prevent, detect, and respond to threats. elastic securitylatesttopicsdiscussstack https://www.elastic.co/docs/reference/security/fields-and-object-schemas Fields and object schemas for Elastic Security | Elastic Docs This reference section provides details on the fields Elastic Security uses to display data in the UI and Elastic Security JSON object schemas: ECS fields... elastic securityfieldsobjectschemasdocs https://www.elastic.co/docs/solutions/security/get-started/configure-advanced-settings Configure advanced settings for Elastic Security | Elastic Docs The advanced settings control the behavior of the Elastic Security app, such as: Which indices Elastic Security uses to retrieve data, Which data stream... configure advanced settingselastic securitydocs https://www.elastic.co/security/siem SIEM platform | Security information and event management | Elastic SIEM from Elastic Security arms SOC analysts to detect, investigate, and respond faster. Apply comprehensive visibility, advanced analytics, and agentic AI.... siem platformsecurity informationevent managementelastic https://discuss.elastic.co/t/unable-to-configure-elasticsearch-security/228752 Unable to configure elasticsearch security - Elasticsearch - Discuss the Elastic Stack Apr 19, 2020 - Hi Folks, I am trying to build security between elasticsearch and kibana to make SIEM detection work. However been struggling for so long. I followed lot of... configure elasticsearchunablesecuritydiscussstack https://www.elastic.co/elasticon/archive/2021/security/europe/full-time-pii-data-protection-how-randstad-uses-elastic-security-to-keep-client-data-secure Full time PII data protection: How Randstad uses Elastic Security to keep client data secure |... Mar 31, 2023 - See how Randstad Netherlands uses all the features of the Elastic Stack to monitor their environments on AWS and put their analysts first. Randstad NL, an... https://discuss.elastic.co/t/elastic-defend-enterprise-subscription-replace-client-antivirus/385915 Elastic Defend - Enterprise Subscription (Replace Client AntiVirus) - Elastic Security - Discuss... Apr 16, 2026 - Hi Guys, Looking for some advice. I currently have a Serverless Elastic Security Enterprise subscription and have the agent running on all my clients. My ES... enterprise subscriptionantivirus securityelasticdefendreplace