THREAT OPS › Threat News › One agent, the right skills: Elastic Security 9.4 brings domain expertise on demand to every SOC workflow
One agent, the right skills: Elastic Security 9.4 brings domain expertise on demand to every SOC workflow
<p>Three things land on you at once: Attack Discovery correlated 12 alerts into a credential-harvesting campaign overnight, your team just onboarded a new fleet of macOS endpoints and needs detection rules for LOLBin abuse, and a risk score spike on a service account just crossed the critical threshold.</p> <p>In most security operations centers (SOCs), that's three different people, three differe
MITRE ATT&CK techniques
- AppleScriptT1059.002
- CredentialsT1589.001
- Ingress Tool TransferT1105
- System PromptAML.T0069.002
Indicators of compromise
- 198.51.100.47ipv4
- find.security.mldomain
Original source: https://www.elastic.co/security-labs/skills-elastic-security-9-4