Elastic enveils EASE: A AI-driven security solution

Elastic introduces EASE, a serverless AI-powered security tool enhancing existing SIEM and EDR utilities.

Elastic, renowned for its innovations in Search AI, has announced the release of the Elastic AI SOC Engine (EASE). Targeted at strengthening security frameworks, EASE is a serverless tool designed to seamlessly integrate AI into existing SIEM and EDR systems without necessitating immediate migrations.

Offering agentless integrations, EASE employs Elastic's acclaimed Attack Discovery for AI-driven alert correlation. An AI Assistant complements this to expedite the identification of covert threats, thus shaving ample time off manual investigations. Deployed through Elastic Cloud, EASE enables security teams to prioritise threats effectively, reducing the burden of alert fatigue and optimising current security investments.

Santosh Krishnan, General Manager, Observability & Security from Elastic observed, "SOC analysts are overwhelmed by high alert volumes and lack the AI support then need from their existing SIEM and EDR solutions to investigate threats effectively," EASE bridges this gap, ushering Elastic’s AI capabilities into familiar security tools, automatically prioritising threats and speeding up investigations. Ultimately, this leads to a streamlined migration path towards Elastic Security, integrating SIEM, XDR, and cloud security.

EASE stands out with its ability to deploy quickly, delivering immediate benefits to vendors like Splunk, Microsoft Sentinel, and CrowdStrike. Key features include:

  • Agentless integrations: Ingest alerts natively and seamlessly from third-party platforms.
  • AI-powered alert correlation: With Elastic Attack Discovery, alerts are triaged and prioritised efficiently, offering augmented AI-driven summaries.
  • Context-aware AI Assistant: Data connectors integrate through organisations, providing enriched investigations supported by natural language queries.
  • Transparent AI with model flexibility: Flexibility to choose custom LLMs with comprehensive data logging and tracing capabilities.
  • Operational dashboards: Pre-built metrics highlight critical savings, detecting improvements, and elucidating ROI.

According to Michelle Abraham from IDC, “EASE is tackling a common challenge: how to bring open and transparent AI into the SOC without starting from scratch.” This breakthrough tool empowers security teams to advance their threat detection and investigation efforts without overhauling their existing infrastructure.

Gemini CLI's integration with Zed enhances development with seamless AI interaction and real-time...
Vertiv Holdings Co strengthens digital infrastructure through strategic acquisition of Waylay NV,...
MariaDB strengthens its cloud offerings by re-integrating SkySQL's advanced serverless...
Discover how RTX PRO Servers are revolutionising AI infrastructure across various industries.
Databricks strengthens its AI agent capabilities by acquiring Tecton, integrating lightning-fast...
The rapid adoption of AI in businesses, especially SMEs, raises significant concerns about...
Capgemini is set to acquire Cloud4C, enhancing its cloud managed services with automation and...
Five9 unveils case studies showcasing AI's pivotal role in enhancing customer experiences and...