SlideShare a Scribd company logo
1
ElasticON Security
Braden Preston
Director of Product, Elastic Endpoint Security
Get Full Visibility
Blind spots are everywhere
Every person and every asset is
a target
5 1B 5
Data Domains
Practitioners analyze
endpoint, cloud,
network, application,
user, and more!
Events Per Day
Most organizations
average 1 billion
events per day
SOC Analysts
Security Operation
Centers vary in size,
but most have less
than 5 analysts
THE DATA DILEMMA
Solve the dilemma by answering 4 key questions
What data do I need to collect?1
Now that I have it, how do I manage the data?3
How do I make it actionable?4
How do I get that data?2
What data do I need
to collect?
• MITRE ATT&CK™ provides the
data sources required to detect
250 adversary techniques
• There are 50 unique data
sources
• Examples include, “Process
Monitoring”, “DNS Records”,
“Authentication Logs”, and more!
What data do I need
to collect?
• MITRE ATT&CK™ provides the
data sources required to detect
250 adversary techniques
• Examples include, “Process
Monitoring”, “DNS Records”,
“Authentication Logs”, and more!
• There are 50 unique data
sources
Solve the dilemma by answering 4 key questions
What data do I need to collect?1
Now that I have it, how do I manage the data?3
How do I make it actionable?4
How do I get that data?2
Elastic Agent
• Centrally manage all data
collection and endpoint
protection
• Single click integration of data
sources
• Customizable configurations
for complete control and
configurability.
Solve the dilemma by answering 4 key questions
What data do I need to collect?1
Now that I have it, how do I manage the data?3
How do I make it actionable?4
How do I get that data?2
Elastic Security
• A single application for data
analysis across all data domains
and sources
• Configurable data lifecycle
management
• Elastic Common Schema
• No penalties for adding data
sources, endpoints or ingesting
data
• Flexible Storage Tiers
Elastic Common Schema (ECS)
How data is normalized inside Elastic
Defines a common set of fields and
objects to ingest data into
Elasticsearch
Enables cross-source analysis of
diverse data
Designed to be extensible
ECS is adopted throughout the
Elastic Stack
Contributions & feedback welcome
at https://github.com/elastic/ecs
Searching without ECS
src:10.42.42.42
OR client_ip:10.42.42.42
OR apache2.access.remote_ip:
10.42.42.42
OR context.user.ip:10.42.42.42
OR src_ip:10.42.42.42
Searching with ECS
source.ip:10.42.42.42
Solve the dilemma by answering 4 key questions
What data do I need to collect?1
Now that I have it, how do I manage the data?3
How do I make it actionable?4
How do I get that data?2
Threat Hunting
• Proactively Search for
embedded attacks
• Save Analysis in integrated case
management
• Customizable timeline
templates to empower even the
most junior analysts.
Automated
Detection
• Speed and scale of
Elasticsearch to detect known
and unknown threats
• Easily automate threat
detection using queries
KQL/DSL, machine learning,
thresholds, and more!
• 200 free protections;
built in the open
Threat Prevention
• Kernel Level data collection
enables deep visibility
• Protect your Windows, macOS,
and Linux hosts.
• Prevent malware
Demo
Data Dilemma Solved by Elastic Security
Common framework for data collection1
Configurable data management with an open standard for
analysis
3
Actionable Data - Threat Hunting, Automated Detection, Threat
Prevention
4
Single agent for data collection and endpoint protection2
19
Closing slide
This presentation includes forward-looking
statements that are subject to risks and
uncertainties. Actual results may differ materially
as a result of various risk factors included in the
reports on the Forms 10-K, 10-Q, and 8-K, and in
other filings we make with the SEC from time to
time. Elastic undertakes no obligation to update
any of these forward-looking statements.
Try free on Cloud:
ela.st/security-trial
Take a quick spin:
demo.elastic.co
Connect on Slack:
ela.st/slack
Join the Elastic Security community
Thank You
Search. Observe. Protect.
STOP HERE
23
Closing slide
This presentation includes forward-looking
statements that are subject to risks and
uncertainties. Actual results may differ materially
as a result of various risk factors included in the
reports on the Forms 10-K, 10-Q, and 8-K, and in
other filings we make with the SEC from time to
time. Elastic undertakes no obligation to update
any of these forward-looking statements.
Bullet title (Inter 24 pt)
• Try to keep your use of bullet slides to a minimum
• Be creative and think visually
• If you need to source something copy and paste the text box at the
bottom left onto your page
Subtitle sentence case (Inter 18pt)
Bullet slide title treatment can be up to two lines in
length (Inter bold 24 pt)
Subtitle sentence case (Inter 18pt)
Bullet slide title treatment can be up to two lines in
length (Inter bold 24 pt)
• Bullets are sentence case (Inter 18pt)
– Second-line bullets are Inter 14pt
• Third-line bullets are Inter 12pt
• Limit the number of bullets on a slide
• Text highlights are orange, but not underlined
• Try not to go below the recommended font sizes
Bullet title (Inter 24 pt)
• Try to keep your use of bullet slides to a minimum
• Be creative and think visually
• If you need to source something copy and paste the text box at the
bottom left onto your page
Subtitle sentence case (Inter 18pt)
Bullet slide title treatment can be up to two lines in
length (Inter bold 24 pt)
• Bullets are sentence case (Inter 18pt)
‒ Second-line bullets are Inter 14pt
‒ Third-line bullets are Inter 12pt
• Limit the number of bullets on a slide
• Text highlights are orange, but not underlined
• Try not to go below the recommended font sizes
Subtitle sentence case (Inter 18pt)
Place a quote from someone
really, really important and it will
shrink to fit this space…
Author Name Here
Author Name Here
Place a quote from someone
really, really important and it will
shrink to fit this space…
Chart Slide With Multiple Colors
Sub-title or chart title here in sentence case
Chart Slide With Multiple Colors
Sub-title or chart title here in sentence case
Pie Chart Slide With Multiple Colors
Sub-title or chart title here in sentence case
62%
Supporting text
goes here under
the number
62%
Supporting text
goes here under
the number
Pie Chart Slide With Multiple Colors
Sub-title or chart title here in sentence case
Transition Slide Title Goes
Here and Can Be a Few
Lines Long
Subtitle goes here in sentence
case
Transition Slide Title Goes
Here and Can Be a Few
Lines Long
Subtitle goes here in sentence
case
Transition Slide Title Goes
Here and Can Be a Few
Lines Long
Subtitle goes here in sentence
case
Transition Slide Title
Short and Sweet
1M 1M 1M
HEADER HERE
Supporting text
goes here under
the number
HEADER HERE
Supporting text
goes here under
the number
HEADER HERE
Supporting text
goes here under
the number
Big Number Treatment
1M 1M 1M
HEADER HERE
Supporting text
goes here under
the number
HEADER HERE
Supporting text
goes here under
the number
HEADER HERE
Supporting text
goes here under
the number
Big Number Treatment (Dark Mode)
Table Layout Treatment
Subtitle text placeholder sentence case
HEADER HEADER HEADER HEADER
Information Information Information Information
Information Information Information Information
Information Information Information Information
Information Information Information Information
Information Information Information Information
Information Information Information Information
Option 1
Table Layout Treatment
Subtitle text placeholder sentence case
HEADER HEADER HEADER HEADER
Information Information Information Information
Information Information Information Information
Information Information Information Information
Information Information Information Information
Information Information Information Information
Information Information Information Information
Option 2
Table Layout Treatment
Subtitle text placeholder sentence case
HEADER HEADER HEADER HEADER
Information Information Information Information
Information Information Information Information
Information Information Information Information
Information Information Information Information
Information Information Information Information
Information Information Information Information
Option 3
Table Layout Treatment
Subtitle text placeholder sentence case
HEADER HEADER HEADER HEADER
Information Information Information Information
Information Information Information Information
Information Information Information Information
Information Information Information Information
Information Information Information Information
Information Information Information Information
Option 4
Get full visibility and find hidden security issues
Please use this area
for content, screen
shot, or quote; the
next few slide show
examples
Please use this area
for content, screen
shot, or quote; the
next few slide show
examples
We mine and analyze
4 billion events every
day to detect security
hacks and threats.
We mine and analyze
4 billion events every
day to detect security
hacks and threats.
Get full visibility and find hidden security issues
Searching for
Rides
51
With organic logging growing 50%
year over year, and monitoring
infrastructure spend at nearly 10%,
one rogue log can ruin the platform.
The checks and balances necessary
to make sure we don’t hit that
roadblock are built with the Elastic
Stack and Beats.
TEXT GOES HERE IN ALL CAPS
Additional text goes here to support the content and can
be a couple lines in length and sits bottom left aligned
52
With organic logging growing 50%
year over year, and monitoring
infrastructure spend at nearly 10%,
one rogue log can ruin the
platform. The checks and balances
necessary to make sure we don’t
hit that roadblock are built with the
Elastic Stack and Beats.
TEXT GOES HERE IN ALL CAPS
Additional text goes here to support the content and can
be a couple lines in length and sits bottom left aligned
”
The Elastic Stack is critical to us. Every day
millions of users and customers worldwide
trust Box to execute mission-critical
business functions.
“
Some text can go here
Some text can go here
You can use
this area for a
text treatment
that supports
your chosen
imagery
You can use
this area for a
text treatment
that supports
your chosen
imagery
Slide Title Here With
a Few Bullets
Subtitle goes here
• Bullet one goes here in
sentence case and no period
• Bullets should be kept short
and sweet; stay focused
• Use bullets to help break up
content that you need to
have on the screen
Slide Title Here With
a Few Bullets
Subtitle goes here
● Bullet one goes here in
sentence case and no
period
● Bullets should be kept short
and sweet; stay focused
● Use bullets to help break up
content that you need to
have on the screen
Slide Title Here
With Key Points
Subtitle goes here
Header Here
Body copy goes here and just increase the
indent level to get to the proper formatting
Header Here
Body copy goes here and just increase the
indent level to get to the proper formatting
Header Here
Body copy goes here and just increase the
indent level to get to the proper formatting
Header Here
Body copy goes here and just increase the
indent level to get to the proper formatting
LOGGING METRICS APM
ADVANCED
SEARCH
SECURITY
ANALYTICS
DATA
SCIENCE
FOUNDATIONSPECIALIZATIONS
Slide Title Here
With Key Points
Subtitle goes here
Header Here
Body copy goes here and just increase the
indent level to get to the proper formatting
Header Here
Body copy goes here and just increase the
indent level to get to the proper formatting
Header Here
Body copy goes here and just increase the
indent level to get to the proper formatting
Header Here
Body copy goes here and just increase the
indent level to get to the proper formatting
Image Treatment With Caption Layout
How to add your own photos and crop properly…
Your image will populate the
container but you will likely need
to adjust the crop. Double click
on the image to adjust. Use the
blue dots to adjust the size.
Click on the grayed out portion
of the image and drag to the
left or right until you are happy
with the crop.
1 2 3Right click on the image and go
to replace image. Select a new
image from your machine.
You can use
this area for a
text treatment
that supports
your chosen
imagery
Agenda Slide
Use color to highlight
Enter title for section one here and use sentence case1
Enter title for section three here and use sentence case3
Enter title for section four here and use sentence case4
Enter title for section five here and use sentence case5
Enter title for section two here and use sentence case2
Option 1ANOTE THIS SLIDE IS NOT IN THE LAYOUT OPTIONS.
ALWAYS START A NEW PRESENTATION USING THE
CORPORATE TEMPLATE AND ADD YOUR CONTENT
TO THIS SLIDE.
Bullet slide title treatment can be up to two lines in length (Inter bold 24 pt)
• Bullets are sentence case (Inter 18pt)
○ Second-line bullets are Inter 14pt
■ Third-line bullets are Inter 12pt
• Limit the number of bullets on a slide
• Text highlights are orange, but not underlined
• Try not to go below the recommended font sizes
Subtitle sentence case (Inter 18pt)
Agenda Slide
Use color to highlight
Enter title for section one here and use sentence case1
Enter title for section three here and use sentence case
Enter title for section four here and use sentence case
Enter title for section five here and use sentence case
Enter title for section two here and use sentence case2
Option 1BNOTE THIS SLIDE IS NOT IN THE LAYOUT OPTIONS.
ALWAYS START A NEW PRESENTATION USING THE
CORPORATE TEMPLATE AND ADD YOUR CONTENT
TO THIS SLIDE.
3
4
5
Agenda Slide
Use color to highlight
Enter title for section one here and use sentence case
Enter title for section two here and use sentence case
Enter title for section three here and use sentence case
Enter title for section four here and use sentence case
Enter title for section five here and use sentence case
1
2
3
4
5
Option 2NOTE THIS SLIDE IS NOT IN THE LAYOUT OPTIONS.
ALWAYS START A NEW PRESENTATION USING THE
CORPORATE TEMPLATE AND ADD YOUR CONTENT
TO THIS SLIDE.
Agenda Slide
Use color to highlight
Enter title for section one here and use sentence case
Enter title for section two here and use sentence case
Enter title for section three here and use sentence case
Enter title for section four here and use sentence case
Enter title for section five here and use sentence case
1
2
3
4
5
Option 3NOTE THIS SLIDE IS NOT IN THE LAYOUT OPTIONS.
ALWAYS START A NEW PRESENTATION USING THE
CORPORATE TEMPLATE AND ADD YOUR CONTENT
TO THIS SLIDE.
Agenda Slide
Use color to highlight
Enter title for section one here and use sentence case
Enter title for section two here and use sentence case
Enter title for section three here and use sentence case
Enter title for section four here and use sentence case
Enter title for section five here and use sentence case
1
2
3
4
5
Option 4NOTE THIS SLIDE IS NOT IN THE LAYOUT OPTIONS.
ALWAYS START A NEW PRESENTATION USING THE
CORPORATE TEMPLATE AND ADD YOUR CONTENT
TO THIS SLIDE.
Process Diagram Treatment, 5 Ideas
See style page for more color options
1 2 3 4 5
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Process Diagram Treatment, 5 Ideas + Highlight
See style page for more color options
1 2 3 4 5
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Process Diagram Treatment, 4 Ideas
See style page for more color options
Supporting text
goes here under
the number
1 2 3 4
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Process Diagram Treatment, 4 Ideas
See style page for more color options
Supporting text
goes here under
the number
1 2 3 4
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Process Diagram Treatment, 3 Ideas
See style page for more color options
Supporting text
goes here under
the number
1 2 3
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Process Diagram Treatment, 3 Ideas
See style page for more color options
Supporting text
goes here under
the number
1 2 3
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Process Diagram Treatment, 5 Ideas
See style page for more color options
1 2 3 4
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
5
Supporting text
goes here under
the number
Process Diagram Treatment, 5 Ideas + Highlight
See style page for more color options
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
1 2 3 4 5
Process Diagram Treatment, 4 Ideas
See style page for more color options
1 2 3 4
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Process Diagram Treatment, 3 Ideas
See style page for more color options
1 2 3
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Supporting text
goes here under
the number
Title Here Title Here Title Here
• One bullet here
• Two bullet here
• Three bullet here
• One bullet here
• Two bullet here
• Three bullet here
• One bullet here
• Two bullet here
• Three bullet here
Box With Bullet Treatment
Title Here Title Here Title Here
• One bullet here
• Two bullet here
• Three bullet here
• One bullet here
• Two bullet here
• Three bullet here
• One bullet here
• Two bullet here
• Three bullet here
Box With Bullet Treatment with Color Choice
• One bullet here
• Two bullet here
• Three bullet here
Title Here
• One bullet here
• Two bullet here
• Three bullet here
Title Here
• One bullet here
• Two bullet here
• Three bullet here
Title Here
Box Bullet Treatment
• One bullet here
• Two bullet here
• Three bullet here
• One bullet here
• Two bullet here
• Three bullet here
• One bullet here
• Two bullet here
• Three bullet here
Title Here Title Here Title Here
Box Bullet Treatment with Color Scheme
Thank You
Search. Observe. Protect.
Screenshot Treatment With Browser Window
How to drop in your screen shot…
The browser window is like a
frame so anything you drop
behind it will show through.
Drop in your screen shot, go
to the format menu and crop
it to show only what you
want.
2
Last, be sure to right click on
your screen shot, go to order
and send to back.
3
1
Screenshot Treatment With Title and Browser Window
Get full visibility and find hidden security issues
NOTE USE THIS LAYOUT
FOR PLACING ONE FULL
BLEED SCREENSHOT
Use This Slide for Code, Light Version
Use template colors to highlight
curl –XPUT localhost:9200/_template/twitter –d ‘
{
“template” : “twitter_*”,
“setting” : {
“number_of_shards” : 4,
“number_of_replicas” : 1
}
}’
Use This Slide for Code, Dark Version
Use template colors to highlight
curl –XPUT localhost:9200/_template/twitter –d ‘
{
“template” : “twitter_*”,
“setting” : {
“number_of_shards” : 4,
“number_of_replicas” : 1
}
}’
Color Palette
254
197
20
47
67
145
250
115
79
240
78
152
151
156
171
67
71
83
0
119
204
0
191
179
PRIMARY
Styles and Treatments
SHAPES
LOGOS
Please use logos according
to brand guidelines. These
logos can be sized up and
down without losing quality.
Please press shift before
sizing to keep proper
proportions.
Various template colors can
be used for shapes. Shapes
should have a 3pt line stroke.
Video or Large Image Treatment
Sub header goes here
Search. Observe. Protect.
3 solutions
Elastic Enterprise Search Elastic SecurityElastic Observability
Elastic Enterprise Search
Workplace Search App Search Site Search
Elastic Observability
Logs Metrics APM Uptime
Endpoint SIEM
Elastic Security
3 solutions powered by 1 stack
Kibana
Elasticsearch
Beats Logstash
Elastic Stack
Elastic Enterprise Search Elastic SecurityElastic Observability
The Elastic Stack
Reliably and securely take data from
any source, in any format, then search,
analyze, and visualize it in real time.
Deploy anywhere.
SaaS Orchestration
Elastic Cloud
on Kubernetes
Elastic Cloud Elastic Cloud
Enterprise
Elastic Enterprise Search Elastic SecurityElastic Observability
Kibana
Elasticsearch
Beats Logstash
Powered by
the stack
3 solutions
Deployed
anywhere
Deploy anywhere.
SaaS Orchestration
Elastic Cloud
on Kubernetes
Elastic Cloud Elastic Cloud
Enterprise
Elastic Enterprise Search Elastic SecurityElastic Observability
Kibana
Elasticsearch
Beats Logstash
Powered by
the stack
3 solutions
Deployed
anywhere
Deploy anywhere.
SaaS Orchestration
Elastic Cloud Elastic Cloud on
Kubernetes
Elastic Cloud
Enterprise
Subscription Options
ELASTIC CLOUD
FREE PAID
Open Source
Features
Free Proprietary
Features
Paid Proprietary Features
+
Elastic Support
PAID
OPEN SOURCE BASIC GOLD PLATINUM ENTERPRISE
SELFMANAGEDSaaS
Resource-based Pricing
Endpoint Security
No endpoint-based pricing
SIEM
No seat/ingest-based pricing
APM
No agent-based pricing
Metrics
No host-based pricing
Logs
No ingest-based pricing
App Search
No docs-based pricing
Site Search
No query-based pricing
Workplace Search
No user-based pricing
Elastic Enterprise Search Elastic SecurityElastic Observability
31 Solution Logos
ENTERPRISE
SEARCH
OBSERVABILITY SECURITY
Elastic Logo + Tagline
FULL COLOR
REVERSE
Solution Logo Lockups
Solution Logo Lockups
Product Logos
ELASTIC CLOUD
ON KUBERNETES
ECK
KIBANA LOGSTASHELASTICSEARCHBEATS ELASTIC CLOUD
ELASTIC
CLOUD
ENTERPRISE
Product Logos
APMAPP SEARCH
WORKPLACE
SEARCH
METRICS SIEMLOGSSITE SEARCH ENDPOINT
Product Logo Lockups
Product Logo Lockups
Product Logo Lockups
Product Logo Lockups
Product Logo Lockups
Product Logo Lockups
Iconography Usage
Product Feature Icons
Do not use these icons for
anything other than what
they are created for.
Product Feature Icons are created
to correlate with a specific feature
within the product and are not
flexible in use. Please see labels as
a guide.
Generic Icons
These icons are made to fit across
multiple concepts within reason.
See labels as a general guide.
Please use discretion.
Training Icons
Do not use these icons for
anything other than what
they are created for.
Training Icons are created to
correlate with a specific feature
within the training relm and are not
flexible in use. Please see labels as
a guide.
Feature Icons
winlogbeat heartbeat packetbeat metricbeat functionbeat filebeat auditbeat index patterns Index
management
Life cycle
management
create single job create advanced
job
create multi
metric job
create population
job
machine
learning
advanced
settings
apm sql visualize dashboards
canvas upgrade assistant management security analytics add data search
profiler
users and
roles
saved objects reporting security settings
grok debugger language clients infra console discover dev tools watcher rollups cross cluster
replication
data visualizer
metrics monitoring notebook logging spaces logstash pipeline gis application timelion graph --
Training Icons
apm metrics Security analytics logging
specializationEngineering 1 Engineering 2 certification Advanced search Data science
subscription on-demand Instructor led
stack
Generic Icons
training support subscription
customers
structured schema schemaless rapid query
execution
sql No sql Horizontal scale
flexible data
model
downloads custom consulting community community
members
Sophisticated query
language
node idea chart
news user reliable extensible upgrade IoT plugin scale real-time high-five
location distributed visibility plan E commerce family vacation presentation education guide book
benefits certificate video contribution target Health monitor overlap conversation speaker government
Generic Icons
To do Source code Color outside
of the lines
blog Send
message
docs mobile browser Love
letter
connection
Feature Icons
winlogbeat heartbeat packetbeat metricbeat functionbeat filebeat auditbeat index patterns Index
management
Life cycle
management
create single job create advanced
job
create multi
metric job
create population
job
machine
learning
advanced
settings
apm sql visualize dashboards
canvas upgrade assistant management security analytics add data search
profiler
users and
roles
saved objects reporting security settings
grok debugger language clients infra console discover dev tools watcher rollups cross cluster
replication
data visualizer
metrics monitoring notebook logging spaces logstash pipeline gis application timelion graph --
Training Icons
apm metrics Security analytics logging
specializationEngineering 1 Engineering 2 certification Advanced search Data science
subscription on-demand Instructor led
stack
Generic Icons
training support subscription
customers
structured schema schemaless rapid query
execution
sql No sql Horizontal scale
flexible data
model
downloads custom consulting community community
members
Sophisticated query
language
node idea chart
news user reliable extensible upgrade IoT plugin scale real-time high-five
location distributed visibility plan E commerce family vacation presentation education guide book
benefits certificate video contribution target Health monitor overlap conversation speaker government
Generic Icons
To do Source code Color outside
of the lines
blog Send
message
docs mobile browser Love
letter
connection
Feature Icons
winlogbeat heartbeat packetbeat metricbeat functionbeat filebeat auditbeat index patterns Index
management
Life cycle
management
create single job create advanced
job
create multi
metric job
create population
job
machine
learning
advanced
settings
apm sql visualize dashboards
canvas upgrade assistant management security analytics add data search
profiler
users and
roles
saved objects reporting security settings
grok debugger language clients infra console discover dev tools watcher rollups cross cluster
replication
data visualizer
metrics monitoring notebook logging spaces logstash pipeline gis application timelion graph --
Training Icons
apm metrics Security analytics logging
specializationEngineering 1 Engineering 2 certification Advanced search Data science
subscription on-demand Instructor led
stack
Generic Icons
training support subscription
customers
structured schema schemaless rapid query
execution
sql No sql Horizontal scale
flexible data
model
downloads custom consulting community community
members
Sophisticated query
language
node idea chart
news user reliable extensible upgrade IoT plugin scale real-time high-five
location distributed visibility plan E commerce family vacation presentation education guide book
benefits certificate video contribution target Health monitor overlap conversation speaker government
Generic Icons
To do Source code Color outside
of the lines
blog Send
message
docs mobile browser Love
letter
connection
Feature Icons
winlogbeat heartbeat packetbeat metricbeat functionbeat filebeat auditbeat index patterns Index
management
Life cycle
management
create single job create advanced
job
create multi
metric job
create population
job
machine
learning
advanced
settings
apm sql visualize dashboards
canvas upgrade assistant management security analytics add data search
profiler
users and
roles
saved objects reporting security settings
grok debugger language clients infra console discover dev tools watcher rollups cross cluster
replication
data visualizer
metrics monitoring notebook logging spaces logstash pipeline gis application timelion graph --
Training Icons
apm metrics Security analytics logging
specializationEngineering 1 Engineering 2 certification Advanced search Data science
subscription on-demand Instructor led
stack
Generic Icons
training support subscription
customers
structured schema schemaless rapid query
execution
sql No sql Horizontal scale
flexible data
model
downloads custom consulting community community
members
Sophisticated query
language
node idea Light bulb
news user reliable extensible upgrade IoT plugin scale real-time high-five
location distributed visibility plan E commerce family vacation presentation education guide book
benefits certificate video contribution target Health monitor overlap conversation speaker government
Generic Icons
To do Source code Color outside
of the lines
blog Send
message
docs mobile browser Love
letter
connection

More Related Content

What's hot (20)

PDF
Reinventing enterprise defense with the Elastic Stack
Elasticsearch
 
PDF
Search for all with Elastic Enterprise Search
Elasticsearch
 
PDF
Industrial production process visualization with the Elastic Stack in real-ti...
Elasticsearch
 
PDF
Empower your security practitioners with the Elastic Stack
Elasticsearch
 
PDF
Countering Threats with the Elastic Stack at CERDEC/ARL
Elasticsearch
 
PDF
Log Monitoring and Anomaly Detection at Scale at ORNL
Elasticsearch
 
PDF
O monitoramento da infraestrutura facilitado, da ingestão ao insight
Elasticsearch
 
PDF
Monitoring and Securing a Geo-Dispersed Data Center at Hill AFB
Elasticsearch
 
PDF
Centralized logging in a changing environment at the UK’s DVLA
Elasticsearch
 
PDF
Automatize a detecção de ameaças e evite falsos positivos
Elasticsearch
 
PDF
How eStruxture Data Centers is Using ECE to Rapidly Scale Their Business
Elasticsearch
 
PDF
End-to-End Security Analytics with the Elastic Stack
Elasticsearch
 
PDF
Achieving cyber mission assurance with near real-time impact
Elasticsearch
 
PDF
Keynote: Elastic Security evolution and vision
Elasticsearch
 
PDF
Machine Learning for Anomaly Detection, Time Series Modeling, and More
Elasticsearch
 
PDF
Security Events Logging at Bell with the Elastic Stack
Elasticsearch
 
PDF
Elastic and Google: Observability for multicloud and hybrid environments
Elasticsearch
 
PPTX
Apache Spot
Austin Leahy
 
PDF
Infrastructure monitoring made easy, from ingest to insight
Elasticsearch
 
PDF
How KeyBank Used Elastic to Build an Enterprise Monitoring Solution
Elasticsearch
 
Reinventing enterprise defense with the Elastic Stack
Elasticsearch
 
Search for all with Elastic Enterprise Search
Elasticsearch
 
Industrial production process visualization with the Elastic Stack in real-ti...
Elasticsearch
 
Empower your security practitioners with the Elastic Stack
Elasticsearch
 
Countering Threats with the Elastic Stack at CERDEC/ARL
Elasticsearch
 
Log Monitoring and Anomaly Detection at Scale at ORNL
Elasticsearch
 
O monitoramento da infraestrutura facilitado, da ingestão ao insight
Elasticsearch
 
Monitoring and Securing a Geo-Dispersed Data Center at Hill AFB
Elasticsearch
 
Centralized logging in a changing environment at the UK’s DVLA
Elasticsearch
 
Automatize a detecção de ameaças e evite falsos positivos
Elasticsearch
 
How eStruxture Data Centers is Using ECE to Rapidly Scale Their Business
Elasticsearch
 
End-to-End Security Analytics with the Elastic Stack
Elasticsearch
 
Achieving cyber mission assurance with near real-time impact
Elasticsearch
 
Keynote: Elastic Security evolution and vision
Elasticsearch
 
Machine Learning for Anomaly Detection, Time Series Modeling, and More
Elasticsearch
 
Security Events Logging at Bell with the Elastic Stack
Elasticsearch
 
Elastic and Google: Observability for multicloud and hybrid environments
Elasticsearch
 
Apache Spot
Austin Leahy
 
Infrastructure monitoring made easy, from ingest to insight
Elasticsearch
 
How KeyBank Used Elastic to Build an Enterprise Monitoring Solution
Elasticsearch
 

Similar to Get full visibility and find hidden security issues (20)

DOCX
CJUS 703Biblical Worldview of Corrections Assignment Instruction
VinaOconner450
 
PDF
Obtén visibilidad completa y encuentra problemas de seguridad ocultos
Elasticsearch
 
PDF
MongoDB World 2019: Finding the Right MongoDB Atlas Cluster Size: Does This I...
MongoDB
 
PDF
TeelTech - Advancing Mobile Device Forensics (online version)
Mike Felch
 
PPTX
Precision Content™ Tools, Techniques, and Technology
dclsocialmedia
 
PDF
NLP-Focused Applied ML at Scale for Global Fleet Analytics at ExxonMobil
Databricks
 
PDF
Declarative Multilingual Information Extraction with SystemT
Laura Chiticariu
 
PDF
Lessons Of Binary Analysis - Christien Rioux
crioux1
 
PPTX
Karen Lopez 10 Physical Data Modeling Blunders
Karen Lopez
 
PPTX
Performance By Design
Guy Harrison
 
PPTX
Interactive ad-hoc analysis at petabyte scale with HDInsight Interactive Query
Ashish Thapliyal
 
PPTX
Interactive ad-hoc analysis at petabyte scale with HDInsight Interactive Query
Microsoft Tech Community
 
PPTX
Tldr
Narayana Murthy
 
PDF
Provenance in Production-Grade Machine Learning
Anand Sampat
 
PDF
Five Ways To Do Data Analytics "The Wrong Way"
Discover Pinterest
 
PPTX
Optimizing Application Architecture (.NET/Java topics)
Ravi Okade
 
PPTX
Webinar: Scaling MongoDB
MongoDB
 
PPTX
Ten things to consider for interactive analytics on write once workloads
Abinasha Karana
 
PPTX
(Big) Data (Science) Skills
Oscar Corcho
 
PDF
How to not fail at security data analytics (by CxOSidekick)
Dinis Cruz
 
CJUS 703Biblical Worldview of Corrections Assignment Instruction
VinaOconner450
 
Obtén visibilidad completa y encuentra problemas de seguridad ocultos
Elasticsearch
 
MongoDB World 2019: Finding the Right MongoDB Atlas Cluster Size: Does This I...
MongoDB
 
TeelTech - Advancing Mobile Device Forensics (online version)
Mike Felch
 
Precision Content™ Tools, Techniques, and Technology
dclsocialmedia
 
NLP-Focused Applied ML at Scale for Global Fleet Analytics at ExxonMobil
Databricks
 
Declarative Multilingual Information Extraction with SystemT
Laura Chiticariu
 
Lessons Of Binary Analysis - Christien Rioux
crioux1
 
Karen Lopez 10 Physical Data Modeling Blunders
Karen Lopez
 
Performance By Design
Guy Harrison
 
Interactive ad-hoc analysis at petabyte scale with HDInsight Interactive Query
Ashish Thapliyal
 
Interactive ad-hoc analysis at petabyte scale with HDInsight Interactive Query
Microsoft Tech Community
 
Provenance in Production-Grade Machine Learning
Anand Sampat
 
Five Ways To Do Data Analytics "The Wrong Way"
Discover Pinterest
 
Optimizing Application Architecture (.NET/Java topics)
Ravi Okade
 
Webinar: Scaling MongoDB
MongoDB
 
Ten things to consider for interactive analytics on write once workloads
Abinasha Karana
 
(Big) Data (Science) Skills
Oscar Corcho
 
How to not fail at security data analytics (by CxOSidekick)
Dinis Cruz
 
Ad

More from Elasticsearch (20)

PDF
An introduction to Elasticsearch's advanced relevance ranking toolbox
Elasticsearch
 
PDF
From MSP to MSSP using Elastic
Elasticsearch
 
PDF
Cómo crear excelentes experiencias de búsqueda en sitios web
Elasticsearch
 
PDF
Te damos la bienvenida a una nueva forma de realizar búsquedas
Elasticsearch
 
PDF
Tirez pleinement parti d'Elastic grâce à Elastic Cloud
Elasticsearch
 
PDF
Comment transformer vos données en informations exploitables
Elasticsearch
 
PDF
Plongez au cœur de la recherche dans tous ses états.
Elasticsearch
 
PDF
Modernising One Legal Se@rch with Elastic Enterprise Search [Customer Story]
Elasticsearch
 
PDF
An introduction to Elasticsearch's advanced relevance ranking toolbox
Elasticsearch
 
PDF
Welcome to a new state of find
Elasticsearch
 
PDF
Building great website search experiences
Elasticsearch
 
PDF
Keynote: Harnessing the power of Elasticsearch for simplified search
Elasticsearch
 
PDF
Cómo transformar los datos en análisis con los que tomar decisiones
Elasticsearch
 
PDF
Explore relève les défis Big Data avec Elastic Cloud
Elasticsearch
 
PDF
Comment transformer vos données en informations exploitables
Elasticsearch
 
PDF
Transforming data into actionable insights
Elasticsearch
 
PDF
Opening Keynote: Why Elastic?
Elasticsearch
 
PDF
Empowering agencies using Elastic as a Service inside Government
Elasticsearch
 
PDF
The opportunities and challenges of data for public good
Elasticsearch
 
PDF
Enterprise search and unstructured data with CGI and Elastic
Elasticsearch
 
An introduction to Elasticsearch's advanced relevance ranking toolbox
Elasticsearch
 
From MSP to MSSP using Elastic
Elasticsearch
 
Cómo crear excelentes experiencias de búsqueda en sitios web
Elasticsearch
 
Te damos la bienvenida a una nueva forma de realizar búsquedas
Elasticsearch
 
Tirez pleinement parti d'Elastic grâce à Elastic Cloud
Elasticsearch
 
Comment transformer vos données en informations exploitables
Elasticsearch
 
Plongez au cœur de la recherche dans tous ses états.
Elasticsearch
 
Modernising One Legal Se@rch with Elastic Enterprise Search [Customer Story]
Elasticsearch
 
An introduction to Elasticsearch's advanced relevance ranking toolbox
Elasticsearch
 
Welcome to a new state of find
Elasticsearch
 
Building great website search experiences
Elasticsearch
 
Keynote: Harnessing the power of Elasticsearch for simplified search
Elasticsearch
 
Cómo transformar los datos en análisis con los que tomar decisiones
Elasticsearch
 
Explore relève les défis Big Data avec Elastic Cloud
Elasticsearch
 
Comment transformer vos données en informations exploitables
Elasticsearch
 
Transforming data into actionable insights
Elasticsearch
 
Opening Keynote: Why Elastic?
Elasticsearch
 
Empowering agencies using Elastic as a Service inside Government
Elasticsearch
 
The opportunities and challenges of data for public good
Elasticsearch
 
Enterprise search and unstructured data with CGI and Elastic
Elasticsearch
 
Ad

Recently uploaded (20)

PDF
Rethinking Security Operations - Modern SOC.pdf
Haris Chughtai
 
PDF
Empowering Cloud Providers with Apache CloudStack and Stackbill
ShapeBlue
 
PDF
Human-centred design in online workplace learning and relationship to engagem...
Tracy Tang
 
PDF
Julia Furst Morgado The Lazy Guide to Kubernetes with EKS Auto Mode + Karpenter
AWS Chicago
 
PDF
Trading Volume Explained by CIFDAQ- Secret Of Market Trends
CIFDAQ
 
PPTX
Earn Agentblazer Status with Slack Community Patna.pptx
SanjeetMishra29
 
PDF
Meetup Kickoff & Welcome - Rohit Yadav, CSIUG Chairman
ShapeBlue
 
PPTX
Top Managed Service Providers in Los Angeles
Captain IT
 
PDF
Lecture A - AI Workflows for Banking.pdf
Dr. LAM Yat-fai (林日辉)
 
PDF
Women in Automation Presents: Reinventing Yourself — Bold Career Pivots That ...
DianaGray10
 
PDF
Productivity Management Software | Workstatus
Lovely Baghel
 
PDF
Novus Safe Lite- What is Novus Safe Lite.pdf
Novus Hi-Tech
 
PDF
Market Insight : ETH Dominance Returns
CIFDAQ
 
PDF
CIFDAQ Market Insight for 14th July 2025
CIFDAQ
 
PPTX
Lecture 5 - Agentic AI and model context protocol.pptx
Dr. LAM Yat-fai (林日辉)
 
PPTX
Extensions Framework (XaaS) - Enabling Orchestrate Anything
ShapeBlue
 
PDF
The Past, Present & Future of Kenya's Digital Transformation
Moses Kemibaro
 
PDF
Building Resilience with Digital Twins : Lessons from Korea
SANGHEE SHIN
 
PPTX
The Yotta x CloudStack Advantage: Scalable, India-First Cloud
ShapeBlue
 
PDF
Arcee AI - building and working with small language models (06/25)
Julien SIMON
 
Rethinking Security Operations - Modern SOC.pdf
Haris Chughtai
 
Empowering Cloud Providers with Apache CloudStack and Stackbill
ShapeBlue
 
Human-centred design in online workplace learning and relationship to engagem...
Tracy Tang
 
Julia Furst Morgado The Lazy Guide to Kubernetes with EKS Auto Mode + Karpenter
AWS Chicago
 
Trading Volume Explained by CIFDAQ- Secret Of Market Trends
CIFDAQ
 
Earn Agentblazer Status with Slack Community Patna.pptx
SanjeetMishra29
 
Meetup Kickoff & Welcome - Rohit Yadav, CSIUG Chairman
ShapeBlue
 
Top Managed Service Providers in Los Angeles
Captain IT
 
Lecture A - AI Workflows for Banking.pdf
Dr. LAM Yat-fai (林日辉)
 
Women in Automation Presents: Reinventing Yourself — Bold Career Pivots That ...
DianaGray10
 
Productivity Management Software | Workstatus
Lovely Baghel
 
Novus Safe Lite- What is Novus Safe Lite.pdf
Novus Hi-Tech
 
Market Insight : ETH Dominance Returns
CIFDAQ
 
CIFDAQ Market Insight for 14th July 2025
CIFDAQ
 
Lecture 5 - Agentic AI and model context protocol.pptx
Dr. LAM Yat-fai (林日辉)
 
Extensions Framework (XaaS) - Enabling Orchestrate Anything
ShapeBlue
 
The Past, Present & Future of Kenya's Digital Transformation
Moses Kemibaro
 
Building Resilience with Digital Twins : Lessons from Korea
SANGHEE SHIN
 
The Yotta x CloudStack Advantage: Scalable, India-First Cloud
ShapeBlue
 
Arcee AI - building and working with small language models (06/25)
Julien SIMON
 

Get full visibility and find hidden security issues

  • 1. 1 ElasticON Security Braden Preston Director of Product, Elastic Endpoint Security Get Full Visibility
  • 2. Blind spots are everywhere
  • 3. Every person and every asset is a target
  • 4. 5 1B 5 Data Domains Practitioners analyze endpoint, cloud, network, application, user, and more! Events Per Day Most organizations average 1 billion events per day SOC Analysts Security Operation Centers vary in size, but most have less than 5 analysts THE DATA DILEMMA
  • 5. Solve the dilemma by answering 4 key questions What data do I need to collect?1 Now that I have it, how do I manage the data?3 How do I make it actionable?4 How do I get that data?2
  • 6. What data do I need to collect? • MITRE ATT&CK™ provides the data sources required to detect 250 adversary techniques • There are 50 unique data sources • Examples include, “Process Monitoring”, “DNS Records”, “Authentication Logs”, and more!
  • 7. What data do I need to collect? • MITRE ATT&CK™ provides the data sources required to detect 250 adversary techniques • Examples include, “Process Monitoring”, “DNS Records”, “Authentication Logs”, and more! • There are 50 unique data sources
  • 8. Solve the dilemma by answering 4 key questions What data do I need to collect?1 Now that I have it, how do I manage the data?3 How do I make it actionable?4 How do I get that data?2
  • 9. Elastic Agent • Centrally manage all data collection and endpoint protection • Single click integration of data sources • Customizable configurations for complete control and configurability.
  • 10. Solve the dilemma by answering 4 key questions What data do I need to collect?1 Now that I have it, how do I manage the data?3 How do I make it actionable?4 How do I get that data?2
  • 11. Elastic Security • A single application for data analysis across all data domains and sources • Configurable data lifecycle management • Elastic Common Schema • No penalties for adding data sources, endpoints or ingesting data • Flexible Storage Tiers
  • 12. Elastic Common Schema (ECS) How data is normalized inside Elastic Defines a common set of fields and objects to ingest data into Elasticsearch Enables cross-source analysis of diverse data Designed to be extensible ECS is adopted throughout the Elastic Stack Contributions & feedback welcome at https://github.com/elastic/ecs Searching without ECS src:10.42.42.42 OR client_ip:10.42.42.42 OR apache2.access.remote_ip: 10.42.42.42 OR context.user.ip:10.42.42.42 OR src_ip:10.42.42.42 Searching with ECS source.ip:10.42.42.42
  • 13. Solve the dilemma by answering 4 key questions What data do I need to collect?1 Now that I have it, how do I manage the data?3 How do I make it actionable?4 How do I get that data?2
  • 14. Threat Hunting • Proactively Search for embedded attacks • Save Analysis in integrated case management • Customizable timeline templates to empower even the most junior analysts.
  • 15. Automated Detection • Speed and scale of Elasticsearch to detect known and unknown threats • Easily automate threat detection using queries KQL/DSL, machine learning, thresholds, and more! • 200 free protections; built in the open
  • 16. Threat Prevention • Kernel Level data collection enables deep visibility • Protect your Windows, macOS, and Linux hosts. • Prevent malware
  • 17. Demo
  • 18. Data Dilemma Solved by Elastic Security Common framework for data collection1 Configurable data management with an open standard for analysis 3 Actionable Data - Threat Hunting, Automated Detection, Threat Prevention 4 Single agent for data collection and endpoint protection2
  • 19. 19 Closing slide This presentation includes forward-looking statements that are subject to risks and uncertainties. Actual results may differ materially as a result of various risk factors included in the reports on the Forms 10-K, 10-Q, and 8-K, and in other filings we make with the SEC from time to time. Elastic undertakes no obligation to update any of these forward-looking statements.
  • 20. Try free on Cloud: ela.st/security-trial Take a quick spin: demo.elastic.co Connect on Slack: ela.st/slack Join the Elastic Security community
  • 23. 23 Closing slide This presentation includes forward-looking statements that are subject to risks and uncertainties. Actual results may differ materially as a result of various risk factors included in the reports on the Forms 10-K, 10-Q, and 8-K, and in other filings we make with the SEC from time to time. Elastic undertakes no obligation to update any of these forward-looking statements.
  • 24. Bullet title (Inter 24 pt) • Try to keep your use of bullet slides to a minimum • Be creative and think visually • If you need to source something copy and paste the text box at the bottom left onto your page Subtitle sentence case (Inter 18pt)
  • 25. Bullet slide title treatment can be up to two lines in length (Inter bold 24 pt) Subtitle sentence case (Inter 18pt) Bullet slide title treatment can be up to two lines in length (Inter bold 24 pt) • Bullets are sentence case (Inter 18pt) – Second-line bullets are Inter 14pt • Third-line bullets are Inter 12pt • Limit the number of bullets on a slide • Text highlights are orange, but not underlined • Try not to go below the recommended font sizes
  • 26. Bullet title (Inter 24 pt) • Try to keep your use of bullet slides to a minimum • Be creative and think visually • If you need to source something copy and paste the text box at the bottom left onto your page Subtitle sentence case (Inter 18pt)
  • 27. Bullet slide title treatment can be up to two lines in length (Inter bold 24 pt) • Bullets are sentence case (Inter 18pt) ‒ Second-line bullets are Inter 14pt ‒ Third-line bullets are Inter 12pt • Limit the number of bullets on a slide • Text highlights are orange, but not underlined • Try not to go below the recommended font sizes Subtitle sentence case (Inter 18pt)
  • 28. Place a quote from someone really, really important and it will shrink to fit this space… Author Name Here
  • 29. Author Name Here Place a quote from someone really, really important and it will shrink to fit this space…
  • 30. Chart Slide With Multiple Colors Sub-title or chart title here in sentence case
  • 31. Chart Slide With Multiple Colors Sub-title or chart title here in sentence case
  • 32. Pie Chart Slide With Multiple Colors Sub-title or chart title here in sentence case 62% Supporting text goes here under the number 62% Supporting text goes here under the number
  • 33. Pie Chart Slide With Multiple Colors Sub-title or chart title here in sentence case
  • 34. Transition Slide Title Goes Here and Can Be a Few Lines Long Subtitle goes here in sentence case
  • 35. Transition Slide Title Goes Here and Can Be a Few Lines Long Subtitle goes here in sentence case
  • 36. Transition Slide Title Goes Here and Can Be a Few Lines Long Subtitle goes here in sentence case
  • 38. 1M 1M 1M HEADER HERE Supporting text goes here under the number HEADER HERE Supporting text goes here under the number HEADER HERE Supporting text goes here under the number Big Number Treatment
  • 39. 1M 1M 1M HEADER HERE Supporting text goes here under the number HEADER HERE Supporting text goes here under the number HEADER HERE Supporting text goes here under the number Big Number Treatment (Dark Mode)
  • 40. Table Layout Treatment Subtitle text placeholder sentence case HEADER HEADER HEADER HEADER Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Option 1
  • 41. Table Layout Treatment Subtitle text placeholder sentence case HEADER HEADER HEADER HEADER Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Option 2
  • 42. Table Layout Treatment Subtitle text placeholder sentence case HEADER HEADER HEADER HEADER Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Option 3
  • 43. Table Layout Treatment Subtitle text placeholder sentence case HEADER HEADER HEADER HEADER Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Information Option 4
  • 45. Please use this area for content, screen shot, or quote; the next few slide show examples
  • 46. Please use this area for content, screen shot, or quote; the next few slide show examples
  • 47. We mine and analyze 4 billion events every day to detect security hacks and threats.
  • 48. We mine and analyze 4 billion events every day to detect security hacks and threats.
  • 51. 51 With organic logging growing 50% year over year, and monitoring infrastructure spend at nearly 10%, one rogue log can ruin the platform. The checks and balances necessary to make sure we don’t hit that roadblock are built with the Elastic Stack and Beats. TEXT GOES HERE IN ALL CAPS Additional text goes here to support the content and can be a couple lines in length and sits bottom left aligned
  • 52. 52 With organic logging growing 50% year over year, and monitoring infrastructure spend at nearly 10%, one rogue log can ruin the platform. The checks and balances necessary to make sure we don’t hit that roadblock are built with the Elastic Stack and Beats. TEXT GOES HERE IN ALL CAPS Additional text goes here to support the content and can be a couple lines in length and sits bottom left aligned
  • 53. ” The Elastic Stack is critical to us. Every day millions of users and customers worldwide trust Box to execute mission-critical business functions. “
  • 54. Some text can go here Some text can go here
  • 55. You can use this area for a text treatment that supports your chosen imagery
  • 56. You can use this area for a text treatment that supports your chosen imagery
  • 57. Slide Title Here With a Few Bullets Subtitle goes here • Bullet one goes here in sentence case and no period • Bullets should be kept short and sweet; stay focused • Use bullets to help break up content that you need to have on the screen
  • 58. Slide Title Here With a Few Bullets Subtitle goes here ● Bullet one goes here in sentence case and no period ● Bullets should be kept short and sweet; stay focused ● Use bullets to help break up content that you need to have on the screen
  • 59. Slide Title Here With Key Points Subtitle goes here Header Here Body copy goes here and just increase the indent level to get to the proper formatting Header Here Body copy goes here and just increase the indent level to get to the proper formatting Header Here Body copy goes here and just increase the indent level to get to the proper formatting Header Here Body copy goes here and just increase the indent level to get to the proper formatting LOGGING METRICS APM ADVANCED SEARCH SECURITY ANALYTICS DATA SCIENCE FOUNDATIONSPECIALIZATIONS
  • 60. Slide Title Here With Key Points Subtitle goes here Header Here Body copy goes here and just increase the indent level to get to the proper formatting Header Here Body copy goes here and just increase the indent level to get to the proper formatting Header Here Body copy goes here and just increase the indent level to get to the proper formatting Header Here Body copy goes here and just increase the indent level to get to the proper formatting
  • 61. Image Treatment With Caption Layout How to add your own photos and crop properly… Your image will populate the container but you will likely need to adjust the crop. Double click on the image to adjust. Use the blue dots to adjust the size. Click on the grayed out portion of the image and drag to the left or right until you are happy with the crop. 1 2 3Right click on the image and go to replace image. Select a new image from your machine.
  • 62. You can use this area for a text treatment that supports your chosen imagery
  • 63. Agenda Slide Use color to highlight Enter title for section one here and use sentence case1 Enter title for section three here and use sentence case3 Enter title for section four here and use sentence case4 Enter title for section five here and use sentence case5 Enter title for section two here and use sentence case2 Option 1ANOTE THIS SLIDE IS NOT IN THE LAYOUT OPTIONS. ALWAYS START A NEW PRESENTATION USING THE CORPORATE TEMPLATE AND ADD YOUR CONTENT TO THIS SLIDE.
  • 64. Bullet slide title treatment can be up to two lines in length (Inter bold 24 pt) • Bullets are sentence case (Inter 18pt) ○ Second-line bullets are Inter 14pt ■ Third-line bullets are Inter 12pt • Limit the number of bullets on a slide • Text highlights are orange, but not underlined • Try not to go below the recommended font sizes Subtitle sentence case (Inter 18pt) Agenda Slide Use color to highlight Enter title for section one here and use sentence case1 Enter title for section three here and use sentence case Enter title for section four here and use sentence case Enter title for section five here and use sentence case Enter title for section two here and use sentence case2 Option 1BNOTE THIS SLIDE IS NOT IN THE LAYOUT OPTIONS. ALWAYS START A NEW PRESENTATION USING THE CORPORATE TEMPLATE AND ADD YOUR CONTENT TO THIS SLIDE. 3 4 5
  • 65. Agenda Slide Use color to highlight Enter title for section one here and use sentence case Enter title for section two here and use sentence case Enter title for section three here and use sentence case Enter title for section four here and use sentence case Enter title for section five here and use sentence case 1 2 3 4 5 Option 2NOTE THIS SLIDE IS NOT IN THE LAYOUT OPTIONS. ALWAYS START A NEW PRESENTATION USING THE CORPORATE TEMPLATE AND ADD YOUR CONTENT TO THIS SLIDE.
  • 66. Agenda Slide Use color to highlight Enter title for section one here and use sentence case Enter title for section two here and use sentence case Enter title for section three here and use sentence case Enter title for section four here and use sentence case Enter title for section five here and use sentence case 1 2 3 4 5 Option 3NOTE THIS SLIDE IS NOT IN THE LAYOUT OPTIONS. ALWAYS START A NEW PRESENTATION USING THE CORPORATE TEMPLATE AND ADD YOUR CONTENT TO THIS SLIDE.
  • 67. Agenda Slide Use color to highlight Enter title for section one here and use sentence case Enter title for section two here and use sentence case Enter title for section three here and use sentence case Enter title for section four here and use sentence case Enter title for section five here and use sentence case 1 2 3 4 5 Option 4NOTE THIS SLIDE IS NOT IN THE LAYOUT OPTIONS. ALWAYS START A NEW PRESENTATION USING THE CORPORATE TEMPLATE AND ADD YOUR CONTENT TO THIS SLIDE.
  • 68. Process Diagram Treatment, 5 Ideas See style page for more color options 1 2 3 4 5 Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number
  • 69. Process Diagram Treatment, 5 Ideas + Highlight See style page for more color options 1 2 3 4 5 Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number
  • 70. Process Diagram Treatment, 4 Ideas See style page for more color options Supporting text goes here under the number 1 2 3 4 Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number
  • 71. Process Diagram Treatment, 4 Ideas See style page for more color options Supporting text goes here under the number 1 2 3 4 Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number
  • 72. Process Diagram Treatment, 3 Ideas See style page for more color options Supporting text goes here under the number 1 2 3 Supporting text goes here under the number Supporting text goes here under the number
  • 73. Process Diagram Treatment, 3 Ideas See style page for more color options Supporting text goes here under the number 1 2 3 Supporting text goes here under the number Supporting text goes here under the number
  • 74. Process Diagram Treatment, 5 Ideas See style page for more color options 1 2 3 4 Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number 5 Supporting text goes here under the number
  • 75. Process Diagram Treatment, 5 Ideas + Highlight See style page for more color options Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number 1 2 3 4 5
  • 76. Process Diagram Treatment, 4 Ideas See style page for more color options 1 2 3 4 Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number
  • 77. Process Diagram Treatment, 3 Ideas See style page for more color options 1 2 3 Supporting text goes here under the number Supporting text goes here under the number Supporting text goes here under the number
  • 78. Title Here Title Here Title Here • One bullet here • Two bullet here • Three bullet here • One bullet here • Two bullet here • Three bullet here • One bullet here • Two bullet here • Three bullet here Box With Bullet Treatment
  • 79. Title Here Title Here Title Here • One bullet here • Two bullet here • Three bullet here • One bullet here • Two bullet here • Three bullet here • One bullet here • Two bullet here • Three bullet here Box With Bullet Treatment with Color Choice
  • 80. • One bullet here • Two bullet here • Three bullet here Title Here • One bullet here • Two bullet here • Three bullet here Title Here • One bullet here • Two bullet here • Three bullet here Title Here Box Bullet Treatment
  • 81. • One bullet here • Two bullet here • Three bullet here • One bullet here • Two bullet here • Three bullet here • One bullet here • Two bullet here • Three bullet here Title Here Title Here Title Here Box Bullet Treatment with Color Scheme
  • 83. Screenshot Treatment With Browser Window How to drop in your screen shot… The browser window is like a frame so anything you drop behind it will show through. Drop in your screen shot, go to the format menu and crop it to show only what you want. 2 Last, be sure to right click on your screen shot, go to order and send to back. 3 1
  • 84. Screenshot Treatment With Title and Browser Window
  • 86. NOTE USE THIS LAYOUT FOR PLACING ONE FULL BLEED SCREENSHOT
  • 87. Use This Slide for Code, Light Version Use template colors to highlight curl –XPUT localhost:9200/_template/twitter –d ‘ { “template” : “twitter_*”, “setting” : { “number_of_shards” : 4, “number_of_replicas” : 1 } }’
  • 88. Use This Slide for Code, Dark Version Use template colors to highlight curl –XPUT localhost:9200/_template/twitter –d ‘ { “template” : “twitter_*”, “setting” : { “number_of_shards” : 4, “number_of_replicas” : 1 } }’
  • 90. Styles and Treatments SHAPES LOGOS Please use logos according to brand guidelines. These logos can be sized up and down without losing quality. Please press shift before sizing to keep proper proportions. Various template colors can be used for shapes. Shapes should have a 3pt line stroke.
  • 91. Video or Large Image Treatment Sub header goes here
  • 93. 3 solutions Elastic Enterprise Search Elastic SecurityElastic Observability
  • 94. Elastic Enterprise Search Workplace Search App Search Site Search
  • 97. 3 solutions powered by 1 stack Kibana Elasticsearch Beats Logstash Elastic Stack Elastic Enterprise Search Elastic SecurityElastic Observability
  • 98. The Elastic Stack Reliably and securely take data from any source, in any format, then search, analyze, and visualize it in real time.
  • 99. Deploy anywhere. SaaS Orchestration Elastic Cloud on Kubernetes Elastic Cloud Elastic Cloud Enterprise Elastic Enterprise Search Elastic SecurityElastic Observability Kibana Elasticsearch Beats Logstash Powered by the stack 3 solutions Deployed anywhere
  • 100. Deploy anywhere. SaaS Orchestration Elastic Cloud on Kubernetes Elastic Cloud Elastic Cloud Enterprise Elastic Enterprise Search Elastic SecurityElastic Observability Kibana Elasticsearch Beats Logstash Powered by the stack 3 solutions Deployed anywhere
  • 101. Deploy anywhere. SaaS Orchestration Elastic Cloud Elastic Cloud on Kubernetes Elastic Cloud Enterprise
  • 102. Subscription Options ELASTIC CLOUD FREE PAID Open Source Features Free Proprietary Features Paid Proprietary Features + Elastic Support PAID OPEN SOURCE BASIC GOLD PLATINUM ENTERPRISE SELFMANAGEDSaaS
  • 103. Resource-based Pricing Endpoint Security No endpoint-based pricing SIEM No seat/ingest-based pricing APM No agent-based pricing Metrics No host-based pricing Logs No ingest-based pricing App Search No docs-based pricing Site Search No query-based pricing Workplace Search No user-based pricing Elastic Enterprise Search Elastic SecurityElastic Observability
  • 104. 31 Solution Logos ENTERPRISE SEARCH OBSERVABILITY SECURITY Elastic Logo + Tagline FULL COLOR REVERSE
  • 107. Product Logos ELASTIC CLOUD ON KUBERNETES ECK KIBANA LOGSTASHELASTICSEARCHBEATS ELASTIC CLOUD ELASTIC CLOUD ENTERPRISE
  • 115. Iconography Usage Product Feature Icons Do not use these icons for anything other than what they are created for. Product Feature Icons are created to correlate with a specific feature within the product and are not flexible in use. Please see labels as a guide. Generic Icons These icons are made to fit across multiple concepts within reason. See labels as a general guide. Please use discretion. Training Icons Do not use these icons for anything other than what they are created for. Training Icons are created to correlate with a specific feature within the training relm and are not flexible in use. Please see labels as a guide.
  • 116. Feature Icons winlogbeat heartbeat packetbeat metricbeat functionbeat filebeat auditbeat index patterns Index management Life cycle management create single job create advanced job create multi metric job create population job machine learning advanced settings apm sql visualize dashboards canvas upgrade assistant management security analytics add data search profiler users and roles saved objects reporting security settings grok debugger language clients infra console discover dev tools watcher rollups cross cluster replication data visualizer metrics monitoring notebook logging spaces logstash pipeline gis application timelion graph --
  • 117. Training Icons apm metrics Security analytics logging specializationEngineering 1 Engineering 2 certification Advanced search Data science subscription on-demand Instructor led stack
  • 118. Generic Icons training support subscription customers structured schema schemaless rapid query execution sql No sql Horizontal scale flexible data model downloads custom consulting community community members Sophisticated query language node idea chart news user reliable extensible upgrade IoT plugin scale real-time high-five location distributed visibility plan E commerce family vacation presentation education guide book benefits certificate video contribution target Health monitor overlap conversation speaker government
  • 119. Generic Icons To do Source code Color outside of the lines blog Send message docs mobile browser Love letter connection
  • 120. Feature Icons winlogbeat heartbeat packetbeat metricbeat functionbeat filebeat auditbeat index patterns Index management Life cycle management create single job create advanced job create multi metric job create population job machine learning advanced settings apm sql visualize dashboards canvas upgrade assistant management security analytics add data search profiler users and roles saved objects reporting security settings grok debugger language clients infra console discover dev tools watcher rollups cross cluster replication data visualizer metrics monitoring notebook logging spaces logstash pipeline gis application timelion graph --
  • 121. Training Icons apm metrics Security analytics logging specializationEngineering 1 Engineering 2 certification Advanced search Data science subscription on-demand Instructor led stack
  • 122. Generic Icons training support subscription customers structured schema schemaless rapid query execution sql No sql Horizontal scale flexible data model downloads custom consulting community community members Sophisticated query language node idea chart news user reliable extensible upgrade IoT plugin scale real-time high-five location distributed visibility plan E commerce family vacation presentation education guide book benefits certificate video contribution target Health monitor overlap conversation speaker government
  • 123. Generic Icons To do Source code Color outside of the lines blog Send message docs mobile browser Love letter connection
  • 124. Feature Icons winlogbeat heartbeat packetbeat metricbeat functionbeat filebeat auditbeat index patterns Index management Life cycle management create single job create advanced job create multi metric job create population job machine learning advanced settings apm sql visualize dashboards canvas upgrade assistant management security analytics add data search profiler users and roles saved objects reporting security settings grok debugger language clients infra console discover dev tools watcher rollups cross cluster replication data visualizer metrics monitoring notebook logging spaces logstash pipeline gis application timelion graph --
  • 125. Training Icons apm metrics Security analytics logging specializationEngineering 1 Engineering 2 certification Advanced search Data science subscription on-demand Instructor led stack
  • 126. Generic Icons training support subscription customers structured schema schemaless rapid query execution sql No sql Horizontal scale flexible data model downloads custom consulting community community members Sophisticated query language node idea chart news user reliable extensible upgrade IoT plugin scale real-time high-five location distributed visibility plan E commerce family vacation presentation education guide book benefits certificate video contribution target Health monitor overlap conversation speaker government
  • 127. Generic Icons To do Source code Color outside of the lines blog Send message docs mobile browser Love letter connection
  • 128. Feature Icons winlogbeat heartbeat packetbeat metricbeat functionbeat filebeat auditbeat index patterns Index management Life cycle management create single job create advanced job create multi metric job create population job machine learning advanced settings apm sql visualize dashboards canvas upgrade assistant management security analytics add data search profiler users and roles saved objects reporting security settings grok debugger language clients infra console discover dev tools watcher rollups cross cluster replication data visualizer metrics monitoring notebook logging spaces logstash pipeline gis application timelion graph --
  • 129. Training Icons apm metrics Security analytics logging specializationEngineering 1 Engineering 2 certification Advanced search Data science subscription on-demand Instructor led stack
  • 130. Generic Icons training support subscription customers structured schema schemaless rapid query execution sql No sql Horizontal scale flexible data model downloads custom consulting community community members Sophisticated query language node idea Light bulb news user reliable extensible upgrade IoT plugin scale real-time high-five location distributed visibility plan E commerce family vacation presentation education guide book benefits certificate video contribution target Health monitor overlap conversation speaker government
  • 131. Generic Icons To do Source code Color outside of the lines blog Send message docs mobile browser Love letter connection