Author

Articles by Justin Ibarra

Videos

Rolling your own Detections as Code with Elastic Security

Detections as Code (DaC) is transforming security rule management. Learn about Elastic's latest enhancements in the detection-rules repo, how to leverage it for custom rule management, and our comprehensive guide for adopting DaC.

Videos

ProblemChild: Generate alerts to detect living-off-the-land attacks

In this blog post, we walk through our release of a fully trained detection model, anomaly detection configurations, and detection rules that you can use to get your ProblemChild framework up and running in your environment in minutes.

Videos

Combining supervised and unsupervised machine learning for DGA detection

In this blog, we announce our first-ever supervised ML and security integration. This offers users a supervised ML solution package to detect domain generation algorithm (DGA) activity in your network data.

Videos

Getting started with EQL