Elastic AI Assistant and Attack Discovery integrate with Google Vertex AI to help drive further AI adoption

AI-driven security analytics reduces analyst burnout

By

Dhrumil Patel,

James Spiteri

Screenshot_2024-08-22_at_2.17.07_PM_(2).png

Most SIEM technologies in today’s market have not kept up with the pace of innovation and place a heavy burden on security analysts to perform manual, labor-intensive tasks in order to maintain defenses. Generative AI is helping security professionals address today’s dynamic threat landscape and prepare for future threats. 

Embracing AI, Elastic has delivered multiple features to help reduce the mundane security work to deliver AI-driven security analytics. The Elastic Search AI Platform closes this gap by delivering the speed and accuracy required to meet contemporary security demands. Attack Discovery is one of these features that leverages generative AI to sort and prioritize alerts into the few that matter.

Enhancing cyber defenses with Google Vertex AI

Today, we’re announcing more integrations with Google’s Gemini 1.5 models via Vertex AI that work with the Elastic AI Assistant and Attack Discovery features. This partnership provides security analysts with additional choices for sophisticated large language models and allows Google Cloud customers to select models that are native to their cloud ecosystem. The production use of generative AI reduces analyst burnout by offering a quick and reliable response to help with security threat detection, investigation, and ultimately, remediation.  

“By leveraging Google Gemini's 1.5 advanced reasoning and its up-to-2M token window, Elastic's Attack Discovery and Elastic AI Assistant features can now provide users with a level of contextual understanding previously unimaginable and provide immense value,” said Juan Bustos, lead solutions consultant at Google Cloud. “This integration will empower security professionals to cut through the noise and focus on their primary task: assessing threats.”

Sophisticated threat detection through Attack Discovery

Designed to cut through the noise of alerts, Attack Discovery uses generative AI to triage alerts and identify and interpret advanced attack patterns. The cooperation with Google Vertex AI’s models and Elastic’s extensive suite of AI tools greatly improves the ability to analyze and comprehend these threats. This combined effort is essential for delivering timely and precise threat responses, ensuring thorough risk mitigation.

The automation improvements in Attack Discovery drastically reduce the time required for manual triage and investigation efforts. It offers a clear view of attack sequences from start to potential breaches through an interactive interface that presents detailed threat summaries filled with actionable insights.

Ongoing innovation with Google Vertex AI

In partnership with Google, Elastic continuously advances the functionality of Attack Discovery and AI Assistant by integrating with Google Vertex AI. This collaboration facilitates access to a broad range of foundational models, promoting rapid adaptation and minimal coding through a unified API. Elastic Security Labs actively develops and refines detection rules optimized for Google Vertex AI and other leading technologies, ensuring our solutions stay ahead in the industry.

This partnership showcases Elastic's dedication to harnessing the full range of AI capabilities, enhancing our security frameworks to remain agile and robust against the changing landscape of cyber threats.

Check out what IDC thinks of the Elastic AI Assistant.

The release and timing of any features or functionality described in this post remain at Elastic's sole discretion. Any features or functionality not currently available may not be delivered on time or at all.

In this blog post, we may have used or referred to third party generative AI tools, which are owned and operated by their respective owners. Elastic does not have any control over the third party tools and we have no responsibility or liability for their content, operation or use, nor for any loss or damage that may arise from your use of such tools. Please exercise caution when using AI tools with personal, sensitive or confidential information. Any data you submit may be used for AI training or other purposes. There is no guarantee that information you provide will be kept secure or confidential. You should familiarize yourself with the privacy practices and terms of use of any generative AI tools prior to use. 

Elastic, Elasticsearch, ESRE, Elasticsearch Relevance Engine and associated marks are trademarks, logos or registered trademarks of Elasticsearch N.V. in the United States and other countries. All other company and product names are trademarks, logos or registered trademarks of their respective owners.

Sign up for Elastic Cloud free trial

Spin up a fully loaded deployment on the cloud provider you choose. As the company behind Elasticsearch, we bring our features and support to your Elastic clusters in the cloud.

Start free trial