Detecting and preventing malicious activity such as botnet attacks is a critical area of focus for threat intel analysts, security operators, and threat hunters. Taking up the Mozi botnet as a case study, this blog post demonstrates how to use open source tools, analytical processes, and the Elastic Stack to perform analysis and enrichment of collected data irrespective of the campaign. This will allow you to take the lessons and processes outlined below to your organization and apply them to yo
Leon Gubbels is a Security Business Developer at ENGIE, an Elastic MSP. Remco Sprooten is the Product Owner for the security team. Together they describe how their team expanded their security-as-a-service offer to address operational technology (OT) as well as traditional IT systems. The 2010 Stuxnet malicious software attack on a uranium enrichment plant in Iran had all the twists and turns of a spy thriller. The plant was air gapped (not connected to the internet) so it couldn’t be targeted
As of July 25, 2021, we have launched a brand-new Elastic Support Portal. The new portal experience is fully integrated with Elastic Cloud and builds upon our previous update around login and authentication. For existing subscription users, the flow to get help stays the same — you’ll continue to access support.elastic.co with your Elastic Cloud account. This blog post explains some details around the new portal experience and how it will impact our users. What is changing?We’ve built a ne
We’re pleased to announce you can now run Elastic Cloud on Google Cloud in the Asia Pacific Northeast 3 (Seoul) region. Elastic Cloud gives you the power of enterprise search, observability, and security in the Asia Pacific Northeast 3 (Seoul) region of Google Cloud. Easily search applications, websites, and workplace content platforms for information. Quickly gain deep insights into your environment by monitoring applications and uptime as well as analyzing centralized logs and metrics.
I’m a security analyst at Orange Business Services in Paris, and one of my current projects for the Orange Group is implementing a new SIEM based on the Elastic Stack. In this blog post, I’ll share why we chose Elastic and how we were able to integrate Elastic into our existing SIEM, resulting in faster investigations and saving our engineers’ time. So follow along: Orange Group is a multi-service network operator and digital service provider in 26 countries and serves about 253 million customer
The partnership between Elastic and Alibaba Cloud has expanded our community of users and developers into thousands of commercial users.
This partnership is a leading example of Elastic’s commitment to partnering with companies that users trust with their cloud infrastructure and developing a cloud-native, flexible platform. Other partners include Microsoft Azure, Google Cloud, and AWS.
Now, we are thrilled to be the recipient of Alibaba Cloud’s Walking Together Award. Here, Pankaj Khu
What do an airline, the world’s largest retailer, the French government, Adobe, and NASA’s JPL have in common? They use the Elastic Stack to empower customers, communities, and, even, interplanetary exploration. With the Elastic Stack’s ability to take data from any source and in any format, and then search, analyze, and visualize it in real time, organizations can act quickly to improve customer experience and power critical systems. The flexibility of Elastic as a platform means that th
Is enterprise data a benefit or a burden? Think about all of the data your organization generates and consumes in the digital age — from security event logs to application error messages, energy consumption to vendor contracts. There is so much, and all of it is usually stored in silos, making the data difficult to synthesize to provide better services, identify signals proactively, or make stronger business decisions. How do organizations overcome the challenges of understanding their data so t
We recently released new free on-demand Elastic training courses for the products in the Elastic Enterprise Search solution: Elastic Workplace Search and Elastic App Search. Our on-demand courses provide the same immersive learning experience found in the classroom, but delivered in a convenient, remote environment. These self-paced courses include expertly designed materials, engaging demos, and hands-on lab exercises. They provide everything you need to start creating powerful search exp