- Elastic Security provides a unified security solution including SIEM, endpoint security, threat hunting, and more powered by the Elastic Stack. - It offers one agent that can instantly collect and protect data from endpoints as well as search across data anywhere for investigation and detection. - The protections are developed with input from Elastic security experts and the open source community to provide unparalleled detection capabilities.

1. Elastic Security - The foundation of
modern security teams
Search. Observe. Protect.
James Spiteri
28/10/2020

2. Safe Harbor
Statement
This presentation includes forward-looking
statements that are subject to risks and
uncertainties. Actual results may differ
materially as a result of various risk factors
included in the reports on the Forms 10-K,
10-Q, and 8-K, and in other filings we make
with the SEC from time to time.Elastic
undertakes no obligation to update any of
these forward-looking statements.

3. Elastic is a search company.

4. Search. Observe. Protect.

5. SaaS Orchestration
Elastic Cloud
on Kubernetes
Elastic Cloud Elastic Cloud
Enterprise
Elastic Enterprise Search Elastic SecurityElastic Observability
Kibana
Elasticsearch
Beats Logstash
Elastic Technology
Powered by the
Elastic Stack
3 solutions
Deployed
anywhere

6. 2010
Today
Elasticsearch 0.4
released
ECS 1.0
released
Elasticsearch 1.0
released
Growing use of ELK for
threat hunting
SIEM app
released
Perched
acquired
Endgame
acquired
Logstash
joins forces
Kibana
joins forces
Beats to collect
all the data
Prelert acquiredElastic Cloud
launched
Elastic Security
Unified
security
for all

7. Elastic
Security
The foundation of
modern security
programs
SIEM, endpoint security,
threat hunting, and more
● One Agent - One Click
Only Elastic Security provides a free
agent to instantly collect and protect
● Elastic SMEs + the Community
 Unparalleled protection
Protections are developed in the
open with community engagement
and contributions
● Action all data, for all time
Only Elastic empowers seamless
searching across data anywhere,
including snapshots

8. 8
Create
a case
Create exception
External
notifications
Timeline templates
Value lists
Endpoint exceptions
Elastic Security - Operational Workflows
Events,
external alerts,
intelligence
Administer
Endpoint
security policy
Detection rules
View by Host
or Network
EQL, KQL,
Lucene
queries
ML,
anomaly
detections
Threshold/
aggregations
Detection alerts
False
positive?
Create timeline
investigation
Timelines
YES
NO
Threat hunting workflows
Rule exceptions
External
systems
Key
System
User process
Backend process
Data store
External action
Decision
Detection
engine
Hosts running
Elastic Endpoint
Security
Other hosts
Servers
Network
monitoring
Intrusion
detection and
prevention
Firewalls
Web proxies
APM
More data
sources

9. Demo Time

10. Try free on Cloud:
elastic.co/cloud
Take a quick spin:
demo.elastic.co
Connect on Slack:
ela.st/slack
1 2 3
Join the Elastic community

11. Elastic is a Search Company.
www.elastic.co
Thank You!
Please provide feedback! - https://ela.st/feedback