Cloud Threat Emulation on Autopilot: Context is Everything
15 min1
One SOC, 100 projects: running centralized alert triage on Elastic Security Serverless
9 min
KREMLIN Banking Malware Infects Over 1,500 Systems With Malicious Chrome Extension
in the wild 7 min
Massive Redis Cryptojacking Campaign Hijacks Thousands of Linux Servers
in the wild 5 min
Why 2026 is the Year to Upgrade to an Agentic AI SOC
12 min
Data access: the hidden cost of security vendor lock-in
7 min
How to correlate Kubernetes audit logs with container runtime data
14 min1
REVSTEALER ramps up: analysis of up-and-coming infostealer
in the wild1
Linux Detection Engineering - Fileless Execution
From 88 lines to 1: Detecting DLL hijacking with Elastic Defend
in the wild
Inside Elastic's agentic SOC: How we took AI alert triage from 60% to 92% accuracy
1