Operationalise with alerting, custom dashboards, and timelines

Mar 9, 20210 likes432 views

Fine-tune your incident response processes by monitoring non-compliance, alerting on outlier activity, and customising drilldowns to automate response actions. See how Elastic gives your security team the customised visualisations and workflows you need to improve efficiency, streamline collaboration, and truly operationalise your security insights.

1
ElasticON Security
Aaron Jewitt
Principal Security Analyst
Detections and Analytics Team Lead
Elastic Infosec

2
Safe Harbor
Statement
This presentation includes forward-looking
statements that are subject to risks and
uncertainties. Actual results may diﬀer materially
as a result of various risk factors included in the
reports on the Forms 10-K, 10-Q, and 8-K, and in
other ﬁlings we make with the SEC from time to
time. Elastic undertakes no obligation to update
any of these forward-looking statements.

3
“operationalize,” Merriam-Webster.com Dictionary,
https://www.merriam-webster.com/dictionary/operationalize. Accessed 8/11/2020.

4
There is a running joke within
Gartner’s data science team that every
analyst warms up for a day of client
inquiries by saying operationalization
ﬁve times in the mirror.…
Peter Krensky
Senior Research Analyst, Gartner
“

Organized interaction of
people, processes, and
technology...
to achieve a desired
outcome

7
Elastic Security
Solution
Elastic Security Operational Workflows
Prevention
IT is about data,
computing, and networks.
Prevention starts with
blocking adversary
attacks.
Detection
When prevention is not
enough, detection is critical.
Detection starts on the
endpoint and gains
enterprise context in SIEM.
Response
Detection is made actionable
with response. Tight
integration between Elastic
Security and Third-party tools
makes it so.

Demonstration 1
Elastic Security
Operational Workflows

13
Operationalizing Elastic Security
Analyst Workﬂows

Analysts suffer from
stress...
Lack of interest,
enthusiasm, or concern

How do we arm
analysts to have a
fighting chance to
succeed?

Demonstration 2
Elastic Security
Operationalize Analyst Workflows

20
Operationalizing Elastic Security
Desired Outcomes

Elastic Security- Operationalizing Machine Learning

Demonstration 3
Elastic Security
Operationalize Machine Learning

23
Try free on Cloud:
ela.st/security-trial
Take a quick spin:
demo.elastic.co
Connect on Slack:
ela.st/slack
Join the Elastic Security community

25
Closing Slide
This presentation includes forward-looking
statements that are subject to risks and
uncertainties. Actual results may diﬀer materially
as a result of various risk factors included in the
reports on the Forms 10-K, 10-Q, and 8-K, and in
other ﬁlings we make with the SEC from time to
time. Elastic undertakes no obligation to update
any of these forward-looking statements.

Are you a SIEM user who needs endpoint detection and correlation for complex multi-stage attacks across your environment? Elastic has launched a free and open endpoint security offering, directly integrated into the Elastic Stack. This offering is part of the free distribution tier and is available to every Elastic user. Learn how Elastic Security can help you protect your environment and why this advancement is so significant to security visibility.

Elastic Security: Unified protection for everyoneElasticsearch

1. Elastic Security provides unified protection for everyone through its security solutions including SIEM, endpoint security, threat hunting, and more. 2. It is powered by the Elastic Stack and can be deployed anywhere including Elastic Cloud on Kubernetes. 3. Elastic Security differentiates itself through its fast and scalable search engine, rich visualizations, fully operationalized machine learning, field-proven detection library, and vibrant community ecosystem.

Managing the Elastic Stack at ScaleElasticsearch

Get tips directly from the experts at Elastic about planning for, monitoring, and troubleshooting the Elastic Stack at scale. Elastic experts will share the tools, strategies, and architectures that can be used to ensure cluster health and performance. Learn about using tools like automated alerting to identify and remediate issues rapidly. Walk away armed with best practices for how to ensure both cluster and data resiliency.

Elastic Security under the hoodElasticsearch

Elastic Security, powered by one of the biggest engineering groups inside Elastic today, is operationalizing the speed, scale, and relevance of the Elastic Stack for security use cases. Get an inside look into how Elastic Security works under the hood so you can learn how to make the most of the Elastic Stack for security. We’ll cover the main technical decisions for the detection engine, our endpoint protection, Fleet, data ingestion, and more.

Elastic Security keynoteElasticsearch

Securing the Elastic Stack for freeElasticsearch

This presentation discusses securing the Elastic Stack for free. It provides an overview of how security features have evolved from separate plugins to being integrated and enabled by default. It then summarizes the three main steps to enable security: obtaining TLS certificates, configuring passwords, and enabling security in Elasticsearch. Finally, it discusses how role-based access control and Kibana spaces can be used to implement authorization and multitenancy.

The importance of normalizing your security data to ECSElasticsearch

The Elastic Common Schema (ECS) can be used for SIEM, logging, APM, and more. See the different paths to adopting ECS for security and why data normalization is so critical. Learn how to map custom sources so they can be used by Elastic Security and how to implement custom pipelines that may require additional fields. We'll provide concrete examples and give pointers to relevant resources to help you get going.

Faster business decisions and collaboration with Elastic Workplace SearchElasticsearch

Using Elastic @ Elastic: InfoSec and Elastic SecurityElasticsearch

Elasticsearch: Introducing the wildcard fieldElasticsearch

What's new at Elastic: Update on major initiatives and releasesElasticsearch

Free and open cloud security posture monitoringElasticsearch

As organizations migrate to the cloud, attackers have diversified to operate in cloud environments. Learn about the challenges faced by security teams in the cloud and why attacks against cloud environments often succeed. We’ll demonstrate how to ship event data from platforms like AWS, Okta, and Azure to the Elastic Stack, and how security teams can monitor attacker behavior using Elastic Security and Elastic’s free and open detection rules.

Opening keynote | AmericasElasticsearch

This three sentence summary provides an overview of the key points from the document: The document outlines that the presentation contains forward-looking statements about future offerings, performance, and operations that may not come to fruition due to various risks and uncertainties. It also notes that any features or functions described that are not currently available should not influence purchase decisions. All statements are only valid as of the date of the presentation and Elastic does not intend to update any forward-looking statements except as required by law.

Security analytics with Elastic at Square EnixElasticsearch

The document discusses Square Enix's journey with security analytics and implementing Elastic. It describes starting with a need for increased visibility and analytics beyond just SIEM. Square Enix chose a hybrid approach, beginning with vendor-specific formats and dashboards and migrating to the Elastic Common Schema (ECS) and SIEM. The solution was designed to address all business needs, scale dynamically, and onboard custom log formats while realizing efficiencies with standard tools. Demonstrating value included correlating across corporate and online systems and using additional telemetry for benefits beyond traditional cybersecurity. The presentation wraps up by noting it is not a race to start perfectly and to consider standard versus custom log sources and the engineering overhead of customization.

Machine learning and the Elastic Stack: Everywhere you need itElasticsearch

This document discusses machine learning and the Elastic Stack. It begins with some forward-looking statements about future offerings, expected performance, and uncertainties. It then discusses how machine learning can be used for anomaly detection in time series data to identify patterns and unusual behavior. Different types of time series anomaly detection models are described, including single metric, multi-metric, and population analysis models. The presentation concludes with a brief demo of machine learning in the Elastic Stack.

A new framework for alerts and actions in KibanaElasticsearch

Mappy hour: Uncovering insights with Elastic Maps and location dataElasticsearch

From secure VPC links to SSO with Elastic CloudElasticsearch

Get involved with the security community at ElasticElasticsearch

Explore ways to engage with your local (or virtual) Elastic security community — virtual meetups, hosted and organized events, Slack, forums, and more. Whether you want to showcase your project, learn from others, hear expert opinions and guidance, or simply get connected, we can help. We'll share the latest and greatest in community efforts, including our new community rules repo, EQL, ECS, and more!

How South Dakota's BIT defends against cyber threatsElasticsearch

Advanced correlations for threat detection and moreElasticsearch

Saving money with ElasticElasticsearch

The document discusses tactics for optimizing costs on Elasticsearch Service. It outlines various strategies like utilizing optimized deployment templates, adjusting availability zones, implementing data rollups, setting up ILM policies to rollover data and reduce shards, applying ILM and snapshot management policies, and preparing for an annual commitment by optimizing deployment size based on use case. Implementing these different optimization techniques could help reduce costs by up to half depending on the deployment and use case.

Breaking silos between DevOps and SecOps with ElasticElasticsearch

What is better: 99.999% uptime, continuous delivery, or a secure environment? Yeah, we had the same reaction: “Why do I need to pick one?” With Elastic, your operations and security teams can work together on a single platform, and help drive mean time to detect/resolve to zero for both operational and security issues. Hear how we are helping customers break down artificial silos between teams and use cases, and move towards a DevSecOps culture.

Protecting against cyber attacks at UC Davis with ElasticElasticsearch

This presentation discusses UC Davis' use of Elastic to unify their security information and event logging. Some key points: - UC Davis needed a modern logging platform to replace their aging ArcSight system and consolidate various data sources. They selected Elastic due to its performance, fault tolerance, and manageability. - Elastic aggregates logs from many campus systems in a centralized, indexed manner for analysis, retention, and correlation. This satisfies their core requirement for a unified event stream. - UC Davis has expanded their use of Elastic over time. They now log over 800GB per day to Elastic from various security and IT systems. - Elastic provides the foundation for UC Davis to develop more automated security workflows and integrate

Elasticsearch: From development to production in 15 minutesElasticsearch

Hands-on with data visualization in KibanaElasticsearch

Interested in learning how to build charts, maps, dashboards, and reports in Kibana using Elasticsearch data? Learn how to get started with Kibana Lens, use Elastic Maps for detailed geospatial analysis, and create dashboards and PDF reports. We will show you how to get from data to insights with just a few clicks. After the session is complete, you'll have access to a hands-on lab environment so you can try it yourself.

What's new at Elastic: Update on major initiatives and releasesElasticsearch

Automating the Elastic StackElasticsearch

Operationalize with alerting, custom dashboards, and timelinesElasticsearch

Opérez vos processus avec l'alerting, les tableaux de bord personnalisés et l...Elasticsearch

Optimisez vos processus de réponse aux incidents en monitorant les non-conformités, en créant des alertes sur les activités anormales et en personnalisant l'exploration pour automatiser les actions de réponse. Avec Elastic, votre équipe de sécurité bénéficie des visualisations personnalisées et des workflows dont elle a besoin pour gagner en efficacité, rationaliser la collaboration et rendre vos perspectives de sécurité véritablement opérationnelles.

More Related Content

What's hot (20)

Using Elastic @ Elastic: InfoSec and Elastic SecurityElasticsearch

Elasticsearch: Introducing the wildcard fieldElasticsearch

What's new at Elastic: Update on major initiatives and releasesElasticsearch

Free and open cloud security posture monitoringElasticsearch

Opening keynote | AmericasElasticsearch

Security analytics with Elastic at Square EnixElasticsearch

Machine learning and the Elastic Stack: Everywhere you need itElasticsearch

A new framework for alerts and actions in KibanaElasticsearch

Mappy hour: Uncovering insights with Elastic Maps and location dataElasticsearch

From secure VPC links to SSO with Elastic CloudElasticsearch

Get involved with the security community at ElasticElasticsearch

How South Dakota's BIT defends against cyber threatsElasticsearch

Advanced correlations for threat detection and moreElasticsearch

Saving money with ElasticElasticsearch

Breaking silos between DevOps and SecOps with ElasticElasticsearch

Protecting against cyber attacks at UC Davis with ElasticElasticsearch

Elasticsearch: From development to production in 15 minutesElasticsearch

Hands-on with data visualization in KibanaElasticsearch

What's new at Elastic: Update on major initiatives and releasesElasticsearch

Automating the Elastic StackElasticsearch

Using Elastic @ Elastic: InfoSec and Elastic SecurityElasticsearch

Elasticsearch: Introducing the wildcard fieldElasticsearch

What's new at Elastic: Update on major initiatives and releasesElasticsearch

Free and open cloud security posture monitoringElasticsearch

Opening keynote | AmericasElasticsearch

Security analytics with Elastic at Square EnixElasticsearch

Machine learning and the Elastic Stack: Everywhere you need itElasticsearch

A new framework for alerts and actions in KibanaElasticsearch

Mappy hour: Uncovering insights with Elastic Maps and location dataElasticsearch

From secure VPC links to SSO with Elastic CloudElasticsearch

Get involved with the security community at ElasticElasticsearch

How South Dakota's BIT defends against cyber threatsElasticsearch

Advanced correlations for threat detection and moreElasticsearch

Saving money with ElasticElasticsearch

Breaking silos between DevOps and SecOps with ElasticElasticsearch

Protecting against cyber attacks at UC Davis with ElasticElasticsearch

Elasticsearch: From development to production in 15 minutesElasticsearch

Hands-on with data visualization in KibanaElasticsearch

What's new at Elastic: Update on major initiatives and releasesElasticsearch

Automating the Elastic StackElasticsearch

Similar to Operationalise with alerting, custom dashboards, and timelines (20)

Operationalize with alerting, custom dashboards, and timelinesElasticsearch

Opérez vos processus avec l'alerting, les tableaux de bord personnalisés et l...Elasticsearch

Operar con alertas, dashboards customizados y cronologíaElasticsearch

Afina tus procesos de respuesta a incidentes mediante el monitoreo del incumplimiento al alertar sobre actividades atípicas y personalizar desgloses para automatizar las acciones de respuesta. Ve cómo Elastic le brinda a tu equipo de seguridad visualizaciones personalizadas y flujos de trabajo que necesitas para mejorar la eficiencia, agilizar la colaboración y realmente poner en funcionamiento tus conocimientos de seguridad.

Poner en funcionamiento con alertas, dashboards customizados y líneas de tiempoElasticsearch

Ajusta tus procesos de respuesta ante incidentes monitoreando la falta de cumplimiento, alertando sobre actividad atípica y personalizando exploraciones para automatizar las acciones de respuesta. Ve cómo Elastic le brinda a tu equipo de seguridad las visualizaciones y flujos de trabajo personalizados que necesitas para mejorar la eficiencia, optimizar la colaboración y poner realmente en funcionamiento la información de seguridad.

Operacionalize com alerta, dashboards customizados e linhas do tempoElasticsearch

Keynote: Elastic Security evolution and visionElasticsearch

Advice for CISOs: How to Approach OT CybersecurityMighty Guides, Inc.

The document provides advice from five OT security professionals on how to make industrial control systems (ICS) more secure. It discusses the need to understand your OT environment, recognize that safety takes priority over security concerns, and ensure visibility of network traffic while avoiding interference with control systems. The experts emphasize the importance of a comprehensive asset inventory, passive security tools, and understanding how to respond to suspicious activity without disrupting critical processes.

OT Experts Share Their Strategies - Securing Critical Infrastructure in the P...Mighty Guides, Inc.

October 2020 meetupDaliya Spasova

- Elastic Security provides a unified security solution including SIEM, endpoint security, threat hunting, and more powered by the Elastic Stack. - It offers one agent that can instantly collect and protect data from endpoints as well as search across data anywhere for investigation and detection. - The protections are developed with input from Elastic security experts and the open source community to provide unparalleled detection capabilities.

2008: Web Application Security TutorialNeil Matatall

This document discusses web application security and summarizes key topics from a presentation on the subject. It introduces the Open Web Application Security Project (OWASP) Top 10 list of vulnerabilities, covering Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) in more detail. It also discusses security frameworks like ISO 27001 and the Payment Card Industry Data Security Standard (PCI DSS). The presentation emphasizes the importance of validating all user input to prevent injection attacks.

What i learned at issa international summit 2019Ulf Mattsson

This session will discuss what attendees learned at The ISSA International Summit 2019, held on October 1-2 at in Irving/Dallas, TX. Learn from one of the presenters at this conference and what cybersecurity professionals got to share and learn from the leaders in the industry. Over the last 30 years ISSA international has grown into the global community of choice for international cybersecurity professionals. With over 100 domestic and international chapters, members have world wide support with daily cyber threats that are becoming increasingly intricate and difficult to prevent, detect, and re-mediate.

Keynote: Elastic Security evolution and visionElasticsearch

Strategies for Managing OT Cybersecurity RiskMighty Guides, Inc.

1) OT cybersecurity requires taking a holistic view of plant risk that considers impacts beyond financials, such as safety, environmental and operational impacts. Assets should be classified according to risk so priorities can be set. 2) Knowing the assets in the OT environment is essential before strategies can be developed. New technologies can help with asset inventory. 3) OT cybersecurity responsibilities need to be clearly defined, which could include one or two CISO roles to oversee both IT and OT, with close collaboration.

Delve Labs - Upcoming Security Challenges for the Internet of ThingsFrederic Roy-Gobeil, CPA, CGA, M.Tax.

The document discusses upcoming security challenges for the Internet of Things (IoT) and introduces Warden, an autonomous security solution developed by Delve Labs. Current security strategies are insufficient for IoT due to a shortage of security professionals and incomplete asset visibility. Warden uses artificial intelligence to autonomously perform continuous vulnerability assessments without human supervision, scaling to cover all IoT assets. It aims to mimic expert methodology while reducing false positives through deep learning. Warden generates data to help prioritize issues and integrate with other tools via APIs.

Defending The Castle Rwspjmoquendo

The following paper was submitted as my thesis for the RWSP certification. Thought others may find interest in it. Abstract Research indicates that current trends in information security threats outpaces the security controls that reduce and or eliminate information security vulnerabilities. This document examines the approach of achieving maximum information security defensibility, by utilizing effective offensive testing. Compared are the differences in the effectiveness of security testing by performing a controlled test – referred to as “vanilla” testing, and a responsibly orchestrated blackhat test. Contrary to popular industry belief, realistic “adversarial” testing can be accomplished in a responsible manner without the consequences of “bringing down the house,” contrary to popular belief. Offered, are arguments, costs associated with testing, and counterpoints against organizational decisions that disallow certain types of testing. Blackhat based testing is similar to what a malicious and structured attacker would perform and it is believed that by performing “blackhat” testing, we are taking a “realistic” approach to vulnerability testing. This is the proper route to take to ensure fully scoping the potential vulnerabilities in a given environment in an effort to maintain proper defensibility.

Elastic Security : Protéger son entreprise avec la Suite ElasticElasticsearch

Elastic Security provides unified protection built on the Elastic Stack. It aims to stop threats at scale, eliminate blind spots, and arm every analyst. Features include new modules for collecting data from Office 365 and Okta, CEF module support for Check Point, streaming logs to Logstash, and direct ML integration. Elastic Security is intended to be an out-of-the-box solution that provides prevention, detection, and response capabilities for security analysts everywhere using free and open source tools.

Operating systems security 2007 vulnerability reportAjit Gaddam

Windows Vista had fewer total vulnerabilities (44) than Windows XP (61) in 2007. Windows Vista security updates occurred over fewer patch events (9 weeks) than Windows XP (12 weeks). On average, vulnerabilities took longer to patch in both Windows Vista (163.69 days) and Windows XP (161.52 days). The report analyzed vulnerability and patch data to compare the security of various operating systems in 2007, finding that Windows Vista had a lower vulnerability profile than Windows XP based on these metrics.

Systems architecture with the functional safety/security emphasisAlan Tatourian

Systems Architecture with the Functional Safety-Security emphasis I was asked to give a talk on the unification of Functional Safety (FuSa) and Security for which I replied that two disciplines cannot be viewed separately from Systems Engineering. Instead of talking about safety/security interop, I explained how to build complex systems and how these systems fail. Only when you understand that we do not know how to build absolutely reliable systems and that eventually anything you create fails, you can understand how to add reliability and security mechanisms to your solutions. The summary of the presentation is:  Envision how your solution will be operated  Design for maintainability  Add safety concept  Add security mechanisms  Build for failure

Conferencia principal: Evolución y visión de Elastic SecurityElasticsearch

Los equipos de SecOps asumen más responsabilidad que nunca para aumentar actividad desde una fuerza de trabajo recientemente remota, lo que acelera la necesidad de la transformación digital. Conoce cómo evolucionó Elastic Security para ayudar a los equipos de SecOps tomar un enfoque más amplio e inclusivo en base a la seguridad y preparar a sus organizaciones para el éxito. Además, conoce la visión de lo que vendrá.

Palestra de abertura: Evolução e visão do Elastic SecurityElasticsearch

Operationalize with alerting, custom dashboards, and timelinesElasticsearch

Opérez vos processus avec l'alerting, les tableaux de bord personnalisés et l...Elasticsearch

Operar con alertas, dashboards customizados y cronologíaElasticsearch

Poner en funcionamiento con alertas, dashboards customizados y líneas de tiempoElasticsearch

Operacionalize com alerta, dashboards customizados e linhas do tempoElasticsearch

Keynote: Elastic Security evolution and visionElasticsearch

Advice for CISOs: How to Approach OT CybersecurityMighty Guides, Inc.

OT Experts Share Their Strategies - Securing Critical Infrastructure in the P...Mighty Guides, Inc.

October 2020 meetupDaliya Spasova

2008: Web Application Security TutorialNeil Matatall

What i learned at issa international summit 2019Ulf Mattsson

Keynote: Elastic Security evolution and visionElasticsearch

Strategies for Managing OT Cybersecurity RiskMighty Guides, Inc.

Delve Labs - Upcoming Security Challenges for the Internet of ThingsFrederic Roy-Gobeil, CPA, CGA, M.Tax.

Defending The Castle Rwspjmoquendo

Elastic Security : Protéger son entreprise avec la Suite ElasticElasticsearch

Operating systems security 2007 vulnerability reportAjit Gaddam

Systems architecture with the functional safety/security emphasisAlan Tatourian

Conferencia principal: Evolución y visión de Elastic SecurityElasticsearch

Palestra de abertura: Evolução e visão do Elastic SecurityElasticsearch

More from Elasticsearch (20)

An introduction to Elasticsearch's advanced relevance ranking toolboxElasticsearch

The hallmark of a great search experience is always delivering the most relevant results, quickly, to every user. The difficulty lies behind the scenes in making that happen elegantly and at a scale. From App Search’s intuitive drag and drop interface to the advanced relevance capabilities built into the core of Elasticsearch — Elastic offers a range of tools for developers to tune relevance ranking and create incredible search experiences. In this session, we’ll explore some of Elasticsearch’s advanced relevance ranking features, such as dense vector fields, BM25F, ranking evaluation, and more. Plus we’ll give you some ideas for how these features are being used by other Elastic users to create world-class, category defining search experiences.

From MSP to MSSP using ElasticElasticsearch

Eze Castle Integration is a managed service provider (MSP), cloud service provider (CSP), and internet service provider (ISP) that delivers services to more than 1,000 clients around the world. Different departments within Eze Castle have devised their own log aggregation solutions in order to provide visibility, meet regulatory compliance requirements, conduct cybersecurity investigations, and help engineers with troubleshooting infrastructure issues. In 2019, they partnered with Elastic to consolidate the data generated from different systems into a single pane of glass. And thanks to the ease of deployment on Elastic Cloud, professional consultation services from Elastic engineers, and on-demand training courses available on Elastic Learning, Eze Castle was able to go from proof-of-concept to a fully functioning ""Eze Managed SIEM"" product within a month! Learn about Eze Castle's journey with Elastic and how they grew Eze Managed SIEM from zero to 100 customers In less than 14 months.

Cómo crear excelentes experiencias de búsqueda en sitios webElasticsearch

Descubre lo fácil que es crear búsquedas relevantes y enriquecidas en sitios web de cara al público para impulsar las conversiones, incrementar el consumo de contenido y ayudar a los visitantes a encontrar lo que necesitan. Realiza un recorrido por las herramientas de Elastic a las que puedes sacar partido para transformar con facilidad tu sitio web, lo que incluye nuestro nuevo y potente rastreador web.

Te damos la bienvenida a una nueva forma de realizar búsquedas Elasticsearch

1) The document introduces ElasticON Solution Series, which provides out-of-the-box personalized, centralized, and secure organizational search across internal and external sources. 2) It discusses how Elastic Enterprise Search can improve productivity, satisfaction, collaboration, and decision making by connecting all applications and content with a single scalable search platform. 3) The solution achieves this through intuitive search features, powerful analytics and visualization tools, simplified administration, and security certifications to ensure data protection.

Tirez pleinement parti d'Elastic grâce à Elastic CloudElasticsearch

Découvrez pourquoi Elastic Cloud est la solution idéale pour exploiter toutes les offres d'Elastic. Bénéficiez d'une flexibilité d'achat et de déploiement au sein de Google Cloud, de Microsoft Azure, d'Amazon Web Services ou des trois à la fois. Apprenez quels avantages vous apporte une offre de service géré et déterminez la solution qui vous permet de la gérer par vous-même grâce à des outils intégrés d'automatisation et d'orchestration. Et ce n'est pas tout ! Familiarisez-vous avec les fonctionnalités qui peuvent vous aider à scaler vos opérations au fur et à mesure de l'évolution de votre déploiement, à stocker vos données d'une manière rentable et à optimiser vos recherches. Ainsi, vous n'aurez plus à abandonner de données et obtiendrez les informations exploitables dont vous avez besoin pour assurer le fonctionnement de votre entreprise.

Comment transformer vos données en informations exploitablesElasticsearch

Plongez au cœur de la recherche dans tous ses états.Elasticsearch

À l'instar de la plupart des entreprises modernes, vos équipes utilisent probablement plus de 10 applications hébergées dans le cloud chaque jour, mais passent aussi bien trop de temps à chercher les informations dont elles ont besoin dans ces outils. Grâce aux fonctionnalités prêtes à l'emploi d'Elastic Workplace Search, découvrez combien il est facile de mettre le contenu pertinent à portée de la main de vos équipes grâce à une recherche unifiée sur l'ensemble des applications qu'elles utilisent pour faire leur travail.

Modernising One Legal Se@rch with Elastic Enterprise Search [Customer Story]Elasticsearch

An introduction to Elasticsearch's advanced relevance ranking toolboxElasticsearch

Welcome to a new state of findElasticsearch

Like most modern organizations, your teams are likely using upwards of 10 cloud-based applications on a daily basis, but spending far too many hours a day searching for the information they need across all of them. With the out-of-the-box capabilities of Elastic Workplace Search, see how easy it is to put relevant content right at your teams’ fingertips with unified search across all the apps they rely on to get work done.

Building great website search experiencesElasticsearch

Keynote: Harnessing the power of Elasticsearch for simplified searchElasticsearch

Cómo transformar los datos en análisis con los que tomar decisionesElasticsearch

Explore relève les défis Big Data avec Elastic Cloud Elasticsearch

Spécialisée dans le développement et la gestion de solutions de veille documentaire et commerciale, Explore offre à ses clients une lecture précise et organisée de l’actualités des marchés et projets sur leurs territoires d'intervention. Afin de rendre leur offre plus agile et performante, Explore a choisi l’offre Elastic Cloud hébergée sur Microsoft Azure. Découvrez comment les équipes de production et de développement sont désormais en mesure de mieux exploiter les données pour les clients d’Explore et gagnent du temps sur la gestion de leur infrastructure.

Comment transformer vos données en informations exploitablesElasticsearch

Transforming data into actionable insightsElasticsearch

Opening Keynote: Why Elastic?Elasticsearch

"Elastic enables the world’s leading organization to exceed their business objectives and power their mission-critical systems by eliminating data silos, connecting the dots, and transforming data of all types into actionable insights. Come learn how the power of search can help you quickly surface relevant insights at scale. Whether you are an executive looking to reduce operational costs, a department head striving to do more with fewer tools, or engineer monitoring and protecting your IT environment, this session is for you. "

Empowering agencies using Elastic as a Service inside GovernmentElasticsearch

It has now been four years since the beta release of Elastic Cloud Enterprise which kicked off a wave of the Elastic public sector community running Elastic as a service within Government rather than utilizing purely hosted solutions. Fast forward to 2021 and we have multiple options for multiple mission needs. Learn top tips from Elastic architects and their experience enabling their teams with the automation and provisioning of Elastic tech to change the game in how government delivers solutions.

The opportunities and challenges of data for public goodElasticsearch

The document discusses data for public good and the opportunities and challenges involved. It notes that data infrastructure is needed to deliver public good through data. There are almost endless opportunities to use data for public services, policy, and citizen benefits. However, challenges include legacy systems, data silos, unclear governance, and risk aversion. As a case study, it outlines how the UK Census 2021 addressed index faced challenges but showed progress on using data better, with lessons for continued public sector transformation.

Enterprise search and unstructured data with CGI and ElasticElasticsearch

An introduction to Elasticsearch's advanced relevance ranking toolboxElasticsearch

From MSP to MSSP using ElasticElasticsearch

Cómo crear excelentes experiencias de búsqueda en sitios webElasticsearch

Te damos la bienvenida a una nueva forma de realizar búsquedas Elasticsearch

Tirez pleinement parti d'Elastic grâce à Elastic CloudElasticsearch

Comment transformer vos données en informations exploitablesElasticsearch

Plongez au cœur de la recherche dans tous ses états.Elasticsearch

Modernising One Legal Se@rch with Elastic Enterprise Search [Customer Story]Elasticsearch

An introduction to Elasticsearch's advanced relevance ranking toolboxElasticsearch

Welcome to a new state of findElasticsearch

Building great website search experiencesElasticsearch

Keynote: Harnessing the power of Elasticsearch for simplified searchElasticsearch

Cómo transformar los datos en análisis con los que tomar decisionesElasticsearch

Explore relève les défis Big Data avec Elastic Cloud Elasticsearch

Comment transformer vos données en informations exploitablesElasticsearch

Transforming data into actionable insightsElasticsearch

Opening Keynote: Why Elastic?Elasticsearch

Empowering agencies using Elastic as a Service inside GovernmentElasticsearch

The opportunities and challenges of data for public goodElasticsearch

Enterprise search and unstructured data with CGI and ElasticElasticsearch

Recently uploaded (20)

The Evolution of Meme Coins A New Era for Digital Currency ppt.pdfAbi john

What is Model Context Protocol(MCP) - The new technology for communication bw...Vishnu Singh Chundawat

The MCP (Model Context Protocol) is a framework designed to manage context and interaction within complex systems. This SlideShare presentation will provide a detailed overview of the MCP Model, its applications, and how it plays a crucial role in improving communication and decision-making in distributed systems. We will explore the key concepts behind the protocol, including the importance of context, data management, and how this model enhances system adaptability and responsiveness. Ideal for software developers, system architects, and IT professionals, this presentation will offer valuable insights into how the MCP Model can streamline workflows, improve efficiency, and create more intuitive systems for a wide range of use cases.

Generative Artificial Intelligence (GenAI) in BusinessDr. Tathagat Varma

Heap, Types of Heap, Insertion and DeletionJaydeep Kale

AI Changes Everything – Talk at Cardiff Metropolitan University, 29th April 2...Alan Dix

Talk at the final event of Data Fusion Dynamics: A Collaborative UK-Saudi Initiative in Cybersecurity and Artificial Intelligence funded by the British Council UK-Saudi Challenge Fund 2024, Cardiff Metropolitan University, 29th April 2025 https://alandix.com/academic/talks/CMet2025-AI-Changes-Everything/ Is AI just another technology, or does it fundamentally change the way we live and think? Every technology has a direct impact with micro-ethical consequences, some good, some bad. However more profound are the ways in which some technologies reshape the very fabric of society with macro-ethical impacts. The invention of the stirrup revolutionised mounted combat, but as a side effect gave rise to the feudal system, which still shapes politics today. The internal combustion engine offers personal freedom and creates pollution, but has also transformed the nature of urban planning and international trade. When we look at AI the micro-ethical issues, such as bias, are most obvious, but the macro-ethical challenges may be greater. At a micro-ethical level AI has the potential to deepen social, ethnic and gender bias, issues I have warned about since the early 1990s! It is also being used increasingly on the battlefield. However, it also offers amazing opportunities in health and educations, as the recent Nobel prizes for the developers of AlphaFold illustrate. More radically, the need to encode ethics acts as a mirror to surface essential ethical problems and conflicts. At the macro-ethical level, by the early 2000s digital technology had already begun to undermine sovereignty (e.g. gambling), market economics (through network effects and emergent monopolies), and the very meaning of money. Modern AI is the child of big data, big computation and ultimately big business, intensifying the inherent tendency of digital technology to concentrate power. AI is already unravelling the fundamentals of the social, political and economic world around us, but this is a world that needs radical reimagining to overcome the global environmental and human challenges that confront us. Our challenge is whether to let the threads fall as they may, or to use them to weave a better future.

Big Data Analytics Quick Research Guide by Arthur MorganArthur Morgan

This is a Quick Research Guide (QRG). QRGs include the following: - A brief, high-level overview of the QRG topic. - A milestone timeline for the QRG topic. - Links to various free online resource materials to provide a deeper dive into the QRG topic. - Conclusion and a recommendation for at least two books available in the SJPL system on the QRG topic. QRGs planned for the series: - Artificial Intelligence QRG - Quantum Computing QRG - Big Data Analytics QRG - Spacecraft Guidance, Navigation & Control QRG (coming 2026) - UK Home Computing & The Birth of ARM QRG (coming 2027) Any questions or comments? - Please contact Arthur Morgan at [email protected]. 100% human made.

TrustArc Webinar: Consumer Expectations vs Corporate Realities on Data Broker...TrustArc

Most consumers believe they’re making informed decisions about their personal data—adjusting privacy settings, blocking trackers, and opting out where they can. However, our new research reveals that while awareness is high, taking meaningful action is still lacking. On the corporate side, many organizations report strong policies for managing third-party data and consumer consent yet fall short when it comes to consistency, accountability and transparency. This session will explore the research findings from TrustArc’s Privacy Pulse Survey, examining consumer attitudes toward personal data collection and practical suggestions for corporate practices around purchasing third-party data. Attendees will learn: - Consumer awareness around data brokers and what consumers are doing to limit data collection - How businesses assess third-party vendors and their consent management operations - Where business preparedness needs improvement - What these trends mean for the future of privacy governance and public trust This discussion is essential for privacy, risk, and compliance professionals who want to ground their strategies in current data and prepare for what’s next in the privacy landscape.

Technology Trends in 2025: AI and Big Data AnalyticsInData Labs

At InData Labs, we have been keeping an ear to the ground, looking out for AI-enabled digital transformation trends coming our way in 2025. Our report will provide a look into the technology landscape of the future, including: -Artificial Intelligence Market Overview -Strategies for AI Adoption in 2025 -Anticipated drivers of AI adoption and transformative technologies -Benefits of AI and Big data for your business -Tips on how to prepare your business for innovation -AI and data privacy: Strategies for securing data privacy in AI models, etc. Download your free copy nowand implement the key findings to improve your business.

Semantic Cultivators : The Critical Future Role to Enable AIartmondano

Massive Power Outage Hits Spain, Portugal, and France: Causes, Impact, and On...Aqusag Technologies

Designing Low-Latency Systems with Rust and ScyllaDB: An Architectural Deep DiveScyllaDB

Want to learn practical tips for designing systems that can scale efficiently without compromising speed? Join us for a workshop where we’ll address these challenges head-on and explore how to architect low-latency systems using Rust. During this free interactive workshop oriented for developers, engineers, and architects, we’ll cover how Rust’s unique language features and the Tokio async runtime enable high-performance application development. As you explore key principles of designing low-latency systems with Rust, you will learn how to: - Create and compile a real-world app with Rust - Connect the application to ScyllaDB (NoSQL data store) - Negotiate tradeoffs related to data modeling and querying - Manage and monitor the database for consistently low latencies

How analogue intelligence complements AIPaul Rowe

Artificial Intelligence is providing benefits in many areas of work within the heritage sector, from image analysis, to ideas generation, and new research tools. However, it is more critical than ever for people, with analogue intelligence, to ensure the integrity and ethical use of AI. Including real people can improve the use of AI by identifying potential biases, cross-checking results, refining workflows, and providing contextual relevance to AI-driven results. News about the impact of AI often paints a rosy picture. In practice, there are many potential pitfalls. This presentation discusses these issues and looks at the role of analogue intelligence and analogue interfaces in providing the best results to our audiences. How do we deal with factually incorrect results? How do we get content generated that better reflects the diversity of our communities? What roles are there for physical, in-person experiences in the digital world?

Role of Data Annotation Services in AI-Powered ManufacturingAndrew Leo

Quantum Computing Quick Research Guide by Arthur MorganArthur Morgan

Into The Box Conference Keynote Day 1 (ITB2025)Ortus Solutions, Corp

Build Your Own Copilot & Agents For DevsBrian McKeiver

Greenhouse_Monitoring_Presentation.pptx.hpbmnnxrvb

Increasing Retail Store Efficiency How can Planograms Save Time and Money.pptxAnoop Ashok

Rusty Waters: Elevating Lakehouses Beyond Sparkcarlyakerly1

Spark is a powerhouse for large datasets, but when it comes to smaller data workloads, its overhead can sometimes slow things down. What if you could achieve high performance and efficiency without the need for Spark? At S&P Global Commodity Insights, having a complete view of global energy and commodities markets enables customers to make data-driven decisions with confidence and create long-term, sustainable value. 🌍 Explore delta-rs + CDC and how these open-source innovations power lightweight, high-performance data applications beyond Spark! 🚀

DevOpsDays Atlanta 2025 - Building 10x Development Organizations.pptxJustin Reock

Building 10x Organizations with Modern Productivity Metrics 10x developers may be a myth, but 10x organizations are very real, as proven by the influential study performed in the 1980s, ‘The Coding War Games.’ Right now, here in early 2025, we seem to be experiencing YAPP (Yet Another Productivity Philosophy), and that philosophy is converging on developer experience. It seems that with every new method we invent for the delivery of products, whether physical or virtual, we reinvent productivity philosophies to go alongside them. But which of these approaches actually work? DORA? SPACE? DevEx? What should we invest in and create urgency behind today, so that we don’t find ourselves having the same discussion again in a decade?

The Evolution of Meme Coins A New Era for Digital Currency ppt.pdfAbi john

What is Model Context Protocol(MCP) - The new technology for communication bw...Vishnu Singh Chundawat

Generative Artificial Intelligence (GenAI) in BusinessDr. Tathagat Varma

Heap, Types of Heap, Insertion and DeletionJaydeep Kale

AI Changes Everything – Talk at Cardiff Metropolitan University, 29th April 2...Alan Dix

Big Data Analytics Quick Research Guide by Arthur MorganArthur Morgan

TrustArc Webinar: Consumer Expectations vs Corporate Realities on Data Broker...TrustArc

Technology Trends in 2025: AI and Big Data AnalyticsInData Labs

Semantic Cultivators : The Critical Future Role to Enable AIartmondano

Massive Power Outage Hits Spain, Portugal, and France: Causes, Impact, and On...Aqusag Technologies

Designing Low-Latency Systems with Rust and ScyllaDB: An Architectural Deep DiveScyllaDB

How analogue intelligence complements AIPaul Rowe

Role of Data Annotation Services in AI-Powered ManufacturingAndrew Leo

Quantum Computing Quick Research Guide by Arthur MorganArthur Morgan

Into The Box Conference Keynote Day 1 (ITB2025)Ortus Solutions, Corp

Build Your Own Copilot & Agents For DevsBrian McKeiver

Greenhouse_Monitoring_Presentation.pptx.hpbmnnxrvb

Increasing Retail Store Efficiency How can Planograms Save Time and Money.pptxAnoop Ashok

Rusty Waters: Elevating Lakehouses Beyond Sparkcarlyakerly1

DevOpsDays Atlanta 2025 - Building 10x Development Organizations.pptxJustin Reock

Operationalise with alerting, custom dashboards, and timelines

1. 1 ElasticON Security Aaron Jewitt Principal Security Analyst Detections and Analytics Team Lead Elastic Infosec

2. 2 Safe Harbor Statement This presentation includes forward-looking statements that are subject to risks and uncertainties. Actual results may diﬀer materially as a result of various risk factors included in the reports on the Forms 10-K, 10-Q, and 8-K, and in other ﬁlings we make with the SEC from time to time. Elastic undertakes no obligation to update any of these forward-looking statements.

3. 3 “operationalize,” Merriam-Webster.com Dictionary, https://www.merriam-webster.com/dictionary/operationalize. Accessed 8/11/2020.

4. 4 There is a running joke within Gartner’s data science team that every analyst warms up for a day of client inquiries by saying operationalization ﬁve times in the mirror.… Peter Krensky Senior Research Analyst, Gartner “

5. Organized interaction of people, processes, and technology... to achieve a desired outcome

6. 6 Elastic Security Operational Workﬂows

7. 7 Elastic Security Solution Elastic Security Operational Workflows Prevention IT is about data, computing, and networks. Prevention starts with blocking adversary attacks. Detection When prevention is not enough, detection is critical. Detection starts on the endpoint and gains enterprise context in SIEM. Response Detection is made actionable with response. Tight integration between Elastic Security and Third-party tools makes it so.

8. Elastic Security- Operational Workflows

9. Elastic Security- Operational Workflows

10. Elastic Security- Operational Workflows

11. Elastic Security- Operational Workflows

12. Demonstration 1 Elastic Security Operational Workflows

13. 13 Operationalizing Elastic Security Analyst Workﬂows

14. People are our most precious resource

15. Analysts suffer from stress... Lack of interest, enthusiasm, or concern

16. How do we arm analysts to have a fighting chance to succeed?

17. 17

18. Elastic Security- Analyst Workflows

19. Demonstration 2 Elastic Security Operationalize Analyst Workflows

20. 20 Operationalizing Elastic Security Desired Outcomes

21. Elastic Security- Operationalizing Machine Learning

22. Demonstration 3 Elastic Security Operationalize Machine Learning

23. 23 Try free on Cloud: ela.st/security-trial Take a quick spin: demo.elastic.co Connect on Slack: ela.st/slack Join the Elastic Security community

24. Thank You Search. Observe. Protect.

25. 25 Closing Slide This presentation includes forward-looking statements that are subject to risks and uncertainties. Actual results may diﬀer materially as a result of various risk factors included in the reports on the Forms 10-K, 10-Q, and 8-K, and in other ﬁlings we make with the SEC from time to time. Elastic undertakes no obligation to update any of these forward-looking statements.

Operationalise with alerting, custom dashboards, and timelines

Recommended

More Related Content

What's hot (20)

Similar to Operationalise with alerting, custom dashboards, and timelines (20)

More from Elasticsearch (20)

Recently uploaded (20)

Operationalise with alerting, custom dashboards, and timelines