Elastic Security Features
Network Management (14)
Activity Monitoring
Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point.
Asset Management
Keeps records of each network asset and its activity. Discovers new assets accessing the network.
-
Log Management
Provides security information and stores the data in a secure repository for reference.
Network Monitoring
Tracks and makes accessible data on the health of servers and other network components.
Server Monitoring
Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
File Integrity Monitoring
Validating the integrity of an operating system, application, and files by monitoring for probable changes, tempering, or fraud.
Real-Time Monitoring
Active monitoring of systems, applications, or networks
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Endpoint Management
Track status, assign actions, and control access to systems for devices within the organization
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Incident Management
Manage and track all disruptions and incidents
Vulnerability Management
Detect (and block) vulnerabilities and threats in your applications based on vulnerability information
Policy Management
Create, manage, and track policies and procedures within an organization
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Incident Management (4)
Event Management
Alerts users of incidents and allows users to intervene manually or triggers an automated response.
Automated Response
Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Incident Reporting
Documents cases of abnormal activity and compromised systems.
Real-Time Reporting
Active reporting of data and metrics
Security Intelligence (5)
Threat Intelligence
Stores information related to common threats and how to resolve them once incidents occur.
Vulnerability Assessment
Analyzes your existing network and IT infrastructure to outline access points that can be easily compromised.
Behavioral Analytics
Track and analyse user behavior within a system or network
Data Examination
Allows users to search databases and incident logs to gain insights on vulnerabilities and incidents.
Real-Time Data
Receive data and information in real time
Management (6)
Reporting
View ETL process data via reports and visualizations like charts and graphs.
Auditing
Record ETL historical data for auditing and potential data correction needs.
Extensibility
Allows for customized support for hybrid environments
Workflow Automation
Streamline the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process.
Unified Visibility
Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks.
API
Application programming interface that allows for integration with other systems/databases
Functionality (7)
Extraction
Extract data from the designated source(s) like relational databases, JSON files, and XML files.
Transformation
Cleanse and re-format extracted data to the needed target format.
Loading
Load reformatted data into target database, data warehouse, or other storage location.
Automation
Arrange ETL processes to occur automatically on needed time schedule (e.g., daily, weekly, monthly).
Scalability
Capable of scaling processing power up or down based on ETL volume.
Non-Relational Transformations
Data Extraction
Automatically retrieve and pull information from documents, websites, images, data sets, and other sources
Detection & Response (5)
Response Automation
Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Threat Hunting
Facilitates the proactive search for emerging threats as they target servers, endpoints, and networks.
Rule-Based Detection
Allows administrators to set rules specified to detect issues related to issues such as sensitive data misuse, system misconfiguration, lateral movement, and/or non-compliance.
Real-Time Detection
Constantly monitors system to detect anomalies in real time.
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Analytics (3)
Threat Intelligence
Stores information related to common threats and how to resolve them once incidents occur.
Artificial Intelligence & Machine Learning
Facilitates Artificial Intelligence (AI) such as Machine Learning (ML) to enable data ingestion, performance suggestions, and traffic analysis.
Data Collection
Collects information from multiple sources to cross reference and build contextual to correlate intelligence.
Agentic AI - Security Information and Event Management (SIEM) (4)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Multi-step Planning
Ability to break down and plan multi-step processes
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Decision Making
Makes informed choices based on available data and objectives
Agentic AI - Extended Detection and Response (XDR) Platforms (3)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Decision Making
Makes informed choices based on available data and objectives
Services - Extended Detection and Response (XDR) (1)
Managed Services
Offers managed detection and response services.
Services - Endpoint Detection & Response (EDR) (1)
Managed Services
Offers managed detection and response services.
Additional Functionality (115)
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Application Security
Identify and respond to security threats to developed applications
Risk Analysis
Analyze potential risks across the organization
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Data Import/Export
Import and export data to and from software applications
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Prioritization
Arrange tasks based on the level of priority or urgency
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Search/Filter
Search and filter data across systems to locate required information by entering keywords or certain criteria
Compliance Tracking
Track and report regulatory data to either internal management or external stakeholders
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
API
Application programming interface that allows for integration with other systems/databases
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Data Visualization
Graphical representation of data
Mobile Access
Access software remotely via mobile devices
IT Asset Management
Managing inventories and tracking changes to hardware and software configurations
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Data Import/Export
Import and export data to and from software applications
Encryption
Convert data into a code for security
Remediation Management
Identify and orchestrate execution of actions needed to restore systems to optimal conditions
Root Cause Analysis
Identify and analyse the reasons behind accidents
Customization
Create labels for products that contain required information such as colors, sizes, dates, etc.
Workflow Management
Create, design and manage workflows for repetitive tasks
Incident Management
Manage and track all disruptions and incidents
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Behavioral Analytics
Track and analyse user behavior within a system or network
Ransomware Protection
Protects systems from ransomware attacks and mitigates attack risks
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Data Security
Protect sensitive data for digital privacy
Authentication
Verify the identity of users/devices to enable secure access
Firewalls
Monitor and control network/web traffic based on predetermined rules, protecting against unauthorized access and threats
Collaboration Tools
Provides a channel for team members to share media files, communicate, and work together
Endpoint Protection
Protect users working remotely and provide secure environments for personal devices to access company programs
Cloud Application Security
Identify and respond to security threats to cloud applications
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Data Analysis Tools
Analyze survey results via statistical testing or crosstabs directly within the software
Risk Management
Process of identifying, evaluating, mitigating, addressing and reporting on potential risks or uncertainties
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Network Scanning
Scanning networks to identify security threats
Vulnerability Management
Detect (and block) vulnerabilities and threats in your applications based on vulnerability information
Search/Filter
Search and filter data across systems to locate required information by entering keywords or certain criteria
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Event Analysis
Investigate security threats and validate malicious activity
Prioritization
Arrange tasks based on the level of priority or urgency
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Whitelisting/Blacklisting
Control system access and/or deliverability for applications and email addresses
Remediation Management
Identify and orchestrate execution of actions needed to restore systems to optimal conditions
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Behavioral Analytics
Track and analyse user behavior within a system or network
Continuous Monitoring
Conduct tracking and assessment of application and device behavior without breaks or interruptions
Root Cause Analysis
Identify and analyse the reasons behind accidents
Endpoint Management
Track status, assign actions, and control access to systems for devices within the organization
Anomaly/Malware Detection
Automatically identify and flag unusual behaviors and malicious software
Messaging
Communicate using messages within the system
Enterprise Integration Patterns (EIP)
Set of methodologies and practices to configure integrations between applications, datasets, APIs, and more
Enterprise Service Bus (ESB)
Architectural pattern to integrate mutually interacting applications
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Data Source Connectors
Connect to big data sources
Integrations Management
Identify which applications need to exchange data and enable these data connections
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Enterprise Application Integration
Integration framework that uses a collection of technologies and services to enable the integration of systems and applications.
Electronic Data Interchange
Transfer of data from one computer system to another
Data Mapping
Track the management and flow of data throughout the organization
Monitoring
Observe and track the demand, usage, progress or quality of a system, product, or user
Charting
Manage patient documentation describing all clinical interactions, diagnoses, procedures, medications, etc.
Integration Management
Identify which applications need to exchange data and enable these data connections
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Ad hoc Analysis
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
API
Application programming interface that allows for integration with other systems/databases
Match & Merge
Looking at data from different sources and finding possible duplicates, or identical matches
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Metadata Management
Collect and maintain structured information that describes data or content
Pipeline Management
Track the progress of long term goals, campaigns, and opportunities, for sales, projects, business ventures etc.
Job Scheduling
Planning and managing the execution of tasks or jobs within a computer system, network, or other automated environments
Dashboard Creation
Creation and customization of dashboards
Data Storage Management
Manage and store data in a database
Multiple Data Sources
Allows users to manage data from a number of sources
Data Import/Export
Import and export data to and from software applications
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Data Quality Control
Establish guidelines about how much and what kind of data can be stored in the repository
Data Connectors
Connect to big data sources
Customizable Reports
Alter the layout and content of reports
Single Sign On
Allow users to access multiple services after entering their login credentials once
Version Control
Track revisions and updates made to files and navigate between different versions
Visual Analytics
Interact with data visualization elements, such as charts and graphs, to drill down into data
Accounting Integration
Integrate with a third-party accounting system
Real-Time Data
Receive data and information in real time
eCommerce Management
Has a built-in eCommerce system or integrates with third-party systems to manage online sale of products
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
CRM
Built-in customer relationship management (CRM) capabilities or integration with a third-party CRM system
Data Visualization
Graphical representation of data
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
Search/Filter
Search and filter data across systems to locate required information by entering keywords or certain criteria
Real-Time Analytics
Analyze and gain insights into data in real-time
Data Capture and Transfer
Import, collect, and capture data from multiple sources
Collaboration Tools
Provides a channel for team members to share media files, communicate, and work together
Performance Management
Organize and manage the accomplishments and development of employees or performance of applications or systems
Data Synchronization
Synchronizing data between two or more devices/systems and automatically updating changes to maintain consistency
Drag & Drop
Assemble applications and processes by dragging over and arranging pre-built components
Data Replication
Process of copying and storing data in more than one site or node
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Database Support
Supports common databases such as MySQL and Oracle
Workflow Management
Create, design and manage workflows for repetitive tasks
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Predictive Analytics
Predict future data based on historical data sets
Data Migration
Move from one database to another, or upgrade the version of database software being used
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Data Analysis Tools
Analyze survey results via statistical testing or crosstabs directly within the software



