THREATOPS
THREAT OPSThreat News › Know who to watch before the incident finds you

Know who to watch before the incident finds you

infoelastic_securityPublished 2026-05-05

<p>Elastic Security v9.4 introduces Entity Analytics Watchlists, a new capability in the Entity Analytics suite that lets security teams create named, weighted lists of users, hosts, and services and feed that context directly into the platform's risk scoring pipeline. The gap this closes isn't awareness, as most security teams already know which entities deserve elevated scrutiny. The gap is that

MITRE ATT&CK techniques

Original source: https://www.elastic.co/security-labs/entity-analytics-watchlists