Elastic Security 8.9: AI, rule management, lateral movement detection
Blog post from Elastic
Elastic Security 8.9 introduces a range of new features aimed at enhancing the experience of security analysts, including the integration of the Elastic AI Assistant, which leverages generative AI and large language models to aid in security operations. This release brings advanced detection capabilities, customizable rule tuning, and improved alert management, allowing analysts to automate responses, tag alerts, and monitor detection rules effectively. The update also includes enhanced capabilities for detecting lateral movement using machine learning and prebuilt detection rules, as well as a new upload response action that streamlines endpoint orchestration. Additionally, Elastic Security has simplified the deployment of its Cloud Security Posture Management (CSPM) feature on AWS using CloudFormation, ensuring consistent and error-free resource configuration. These improvements are designed to optimize security workflows and provide analysts with robust tools to manage and investigate threats more efficiently.