THREAT OPS › Threat News › Know who to watch before the incident finds you
Know who to watch before the incident finds you
<p>Elastic Security v9.4 introduces Entity Analytics Watchlists, a new capability in the Entity Analytics suite that lets security teams create named, weighted lists of users, hosts, and services and feed that context directly into the platform's risk scoring pipeline. The gap this closes isn't awareness, as most security teams already know which entities deserve elevated scrutiny. The gap is that
MITRE ATT&CK techniques
- CredentialsT1589.001
Original source: https://www.elastic.co/security-labs/entity-analytics-watchlists