THREAT OPS › Threat News › Elastic Conversational Entity Analytics: threat hunting in a single conversation
Elastic Conversational Entity Analytics: threat hunting in a single conversation
<p>Entity Analytics is a core security analytics capability that extends Elastic Security from event-centric to entity-centric investigation.</p> <p>By focusing on critical entities, such as users, hosts, and services, it builds a complete profile of each entity’s attributes, lifecycle, behaviors, relationships, and risk score over time. This security context equips threat hunters to stop chasing
Original source: https://www.elastic.co/security-labs/entity-analytics-agent-builder