Author

Dhrumil Patel

Subscribe

Articles

Benchmarking the Agentic SOC: How we evaluate LLMs for security workflows

Benchmarking the Agentic SOC: How we evaluate LLMs for security workflows

Public leaderboards can't tell you which LLM to trust in your SOC, so Elastic built an evaluation framework that grades models on the work (tool calls, execution traces, blind judging) across Agent Builder, Attack Discovery, and automatic migration.

One agent, the right skills: Elastic Security 9.4 brings domain expertise on demand to every SOC workflow

One agent, the right skills: Elastic Security 9.4 brings domain expertise on demand to every SOC workflow

Elastic Security 9.4 introduces skills, modular AI capabilities that teach the Elastic AI Agent how to detect, investigate, and hunt like a specialist. This is how they work, and why they matter for the SOC.

Speeding APT Attack Confirmation with Attack Discovery, Workflows, and Agent Builder

Speeding APT Attack Confirmation with Attack Discovery, Workflows, and Agent Builder

This article walks through how Elastic Security's Attack Discovery, combined with Workflows and Agent Builder, can automatically detect, correlate, and confirm APT-level attacks like Chrysalis while reducing analyst response time from hours to minutes.

From Alert Fatigue to Agentic Response: How Workflows and Agent Builder Close the Loop

From Alert Fatigue to Agentic Response: How Workflows and Agent Builder Close the Loop

Attempting to chase individual alerts is a losing strategy. To succeed, we have to move beyond simple automation scripts and into the era of Agentic AI.