What is the difference between elastic SIEM and elastic Security?
Is there a manual to install it in HyperV in onpremise?
Elastic Security refers to a solution stack for security operations that includes a SIEM, endpoint protection and cloud solutions, SOAR capabilities, Threat Intelligence all unified in one environment for management.
Before all these implementations, Elastic only provided a SIEM solution, that is, today, it is possible to go further and equip a SOC team with a solution that brings internal resources and connections with other vendors.
Regarding the installation of Elastic Security, just use a linux distribution and download the Elasticsearch, Kibana and Fleet server applications. However, to make it easier, I recommend using a containerized solution from this project:
2 Likes
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.