Articles by Mark Settle

Elastic Security 8.2 arms analysts with powerful insights and enhanced attack visibility. The release delivers alert contextualization, host inspection directly from an alert, new investigation guides, and the GA of threat intelligence.

With Elastic Security 8.1, stop novel attacks in their tracks. Thwart emerging exploits like Log4Shell with malicious behavior protections for every host and new detection rules for centralized alerting.

Elastic Security 7.16 adds new data integrations for Elastic Agent, expanded malicious behavior protections, memory threat protection for every OS, and enhanced ECS support for Osquery Manager. Plus, new and enhanced ServiceNow workflow integrations.

Elastic 安全 7.13 推出 osquery 集中管理功能，因此您的团队可以对主机数据执行集中管理和统一分析。

体验 Elastic Security 7.9，其具备内置的反恶意软件和数据收集、预建的云保护、增强的分析人员工作流、扩展的数据收集和分析。

Elastic Common Schema (ECS) 简介：ECS 是一种新规格，可让用户以一致、可定制的方式整理 Elasticsearch 中数据的结构。