Attack Discovery turns raw alerts into validated threats and Elastic Defend closes vulnerable driver gaps as fast as they're disclosed. Watch it all run against real attacks at the booth.

Alert Zero: From alert queue to validated threats

How Attack Discovery investigates alerts like an analyst

Closing detection gaps with auto-drafted rules

Elastic Defend endpoint protection: vulnerable driver coverage and Windows on ARM

Vulnerable driver coverage that keeps pace with disclosure

Full endpoint protection for Windows on ARM

Elastic Workflows: SOC automation you can describe in plain language

Build automations in plain language with version control

Human-in-the-loop approvals routed to Slack

Find Elastic Security at Black Hat and DEF CON 2026

Elastic Defend stops threats at the endpoint while Elastic Workflows automates SOC response. See it all at Hacker Summer Camp: Black Hat and DEFCON 2026.

Elastic Security at Black Hat 2026: Alert Zero and agentic SOC

Elastic goes all-in on Hacker Summer Camp at Black Hat and DEF CON in Las Vegas

Author

Jackie McGuire

Articles

Elastic goes all-in on Hacker Summer Camp at Black Hat and DEF CON in Las Vegas