THREATOPS
THREAT OPSThreat News › What's new in Elastic Defend: 800+ vulnerable driver rules, automated troubleshooting, and ARM support

What's new in Elastic Defend: 800+ vulnerable driver rules, automated troubleshooting, and ARM support

medelastic_securityPublished 2026-07-31

<p>We know you’re tired of hearing how every vendor is going to finally help you solve alert fatigue. Well, one way we’re improving alert fatigue is from a slightly different angle, better prevention at the endpoint. Because stopping more at the endpoint means fewer alerts ever raised.</p> <p>We have three endpoint enhancements, all contributing to better endpoint prevention:</p> <ol> <li>To be ev

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://www.elastic.co/security-labs/vulnerable-driver-detection-elastic-defend-byovd