Elastic enveils EASE: A AI-driven security solution

Elastic introduces EASE, a serverless AI-powered security tool enhancing existing SIEM and EDR utilities.

Elastic, renowned for its innovations in Search AI, has announced the release of the Elastic AI SOC Engine (EASE). Targeted at strengthening security frameworks, EASE is a serverless tool designed to seamlessly integrate AI into existing SIEM and EDR systems without necessitating immediate migrations.

Offering agentless integrations, EASE employs Elastic's acclaimed Attack Discovery for AI-driven alert correlation. An AI Assistant complements this to expedite the identification of covert threats, thus shaving ample time off manual investigations. Deployed through Elastic Cloud, EASE enables security teams to prioritise threats effectively, reducing the burden of alert fatigue and optimising current security investments.

Santosh Krishnan, General Manager, Observability & Security from Elastic observed, "SOC analysts are overwhelmed by high alert volumes and lack the AI support then need from their existing SIEM and EDR solutions to investigate threats effectively," EASE bridges this gap, ushering Elastic’s AI capabilities into familiar security tools, automatically prioritising threats and speeding up investigations. Ultimately, this leads to a streamlined migration path towards Elastic Security, integrating SIEM, XDR, and cloud security.

EASE stands out with its ability to deploy quickly, delivering immediate benefits to vendors like Splunk, Microsoft Sentinel, and CrowdStrike. Key features include:

  • Agentless integrations: Ingest alerts natively and seamlessly from third-party platforms.
  • AI-powered alert correlation: With Elastic Attack Discovery, alerts are triaged and prioritised efficiently, offering augmented AI-driven summaries.
  • Context-aware AI Assistant: Data connectors integrate through organisations, providing enriched investigations supported by natural language queries.
  • Transparent AI with model flexibility: Flexibility to choose custom LLMs with comprehensive data logging and tracing capabilities.
  • Operational dashboards: Pre-built metrics highlight critical savings, detecting improvements, and elucidating ROI.

According to Michelle Abraham from IDC, “EASE is tackling a common challenge: how to bring open and transparent AI into the SOC without starting from scratch.” This breakthrough tool empowers security teams to advance their threat detection and investigation efforts without overhauling their existing infrastructure.

AI's accelerated role in creating cyber threats necessitates new security measures.
Cognizant sets the stage for contextual AI deployment with a bold initiative, aiming to enhance...
Digital Realty partners with Vultr for a powerful AI infrastructure, enhancing speed, security, and...
Hyland introduces Enterprise Context Engine and Enterprise Agent Mesh, leading a transformative AI...
CSIRO explores the role of ChatGPT-4 in supporting human analysts, easing workloads and improving...
HPE elevates its Juniper Networking portfolio with AI capabilities, pushing towards autonomous...
Arctic Wolf's report reveals AI's pivotal role in evolving security operations, with 99% seeing it...
AI PCs will make up 31% of the global PC market by 2025 amid market shifts and user demand for AI...