This blog walks through the security challenges associated with ICS and how Elastic Security and Zeek can help address them, in addition to the benefits of having integrated machine learning and threat intelligence within the ICS security program.

A recommendation for using Elasticsearch 5.x for larger time-data analytics: indices & a tiered architecture with 3 different types of nodes, called “Hot-Warm”.

In this blog series we will provide an overview of how to extend and complement the capabilities of your existing SIEM to create an effective security analyt...

Learn about Docker networking and how to use it with an Elasticsearch cluster.

A recommendation for using Elasticsearch for larger time-data analytics: indices & a tiered architecture with 3 different types of nodes, called “Hot-Warm”.