An overview of the Elastic Security and AI infrastructure deployed to support the UK Ministry of Defence's flagship cyber exercise, Defence Cyber Marvel 2026.

What is Defence Cyber Marvel?

The scale of DCM26

The deployments: Our Elastic infrastructure

Blue Teams: Multi-tenanted Elastic Security

The shard stress test: Proving multi-tenancy at scale

Red Teams: C2 implant observability

NSOC: Exercise Network Security Operations Centre

Infrastructure automation: Terraform and Catapult

Training: setting teams up for success

The On-Range AI service: Compliant, audited, Guardrailed

Elastic AI Assistant for Security

Elastic Attack Discovery

The custom AI agents: Elastic Agent Builder

1. GrantPT - The general-purpose assistant

2. REDRock - The adversary's companion

3. RefPT - The referee's tool

Tines: AI-powered workflow automation

Ensuring compliance: Guardrails and audit

In-game real-time monitoring

Sentiment analysis and named entity recognition

Meme analysis (yes, really)

Nipping problems in the bud

Pre-emptive debugging with Tines

Industry partnerships: Better together

Culture, highlights, and the bits that make it worthwhile

The Challenge Coins

The cocktail party

Wrapping up

Elastic on Defence Cyber Marvel 2026: A Technical overview from the Exercise Floor

Author

James Garside

Articles

Elastic on Defence Cyber Marvel 2026: A Technical overview from the Exercise Floor