Elastic Security 7.5.0 released: Elastic SIEM & Elastic Endpoint Security

Elastic Security 7.5.0, released in December 2019, integrates Elastic Endpoint Security and Elastic SIEM to provide comprehensive threat detection and response capabilities. This update follows Elastic's acquisition of Endgame, enhancing their security offerings by combining threat hunting and analytics with prevention and response features. Elastic Endpoint Security, now part of the standard Enterprise subscription, facilitates faster incident response by reducing the mean time to remediate from seven days to 30 minutes, as experienced by Texas A&M University. The 7.5 update introduces new machine learning jobs for identifying anomalous activities, with SIEM app enhancements such as improved UI widgets and pre-built ML jobs to support security analysts in threat hunting. Elastic Endpoint Security further streamlines root-cause analysis and incident management through integration with the Elastic Stack, offering features like automated attack visualization and real-time endpoint isolation. The release allows users to visualize endpoint event data using Kibana dashboards and adds functionality for dismissing alerts with specific reasons, enhancing collaboration and workflow efficiency among security teams.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.