Open Source SIEM and EDR Security
Source: YouTube · John Hammond · published Sep 25, 2025 · 45:29
Elastic has evolved from just the ELK stack to a fully-fledged security analytics platform that offers free, open-source security tools 2:15-2:25. The platform provides comprehensive security capabilities including endpoint protection, detection rules, and AI-powered analysis without gating features behind sales calls 3:30-3:58.
Key Takeaways:
• Elastic offers a free, open security platform with 1,500+ detection rules that are transparently published in GitHub 7:01-7:30
• Elastic Agent provides centralized deployment and management of security integrations across endpoints with simple PowerShell installation 10:01-10:14
• Elastic Defend includes enterprise-grade malware protection with supervised models, ransomware protection, and behavior detection - all free 14:01-14:37
• The platform integrates with third-party EDR solutions and allows cross-vendor response actions 17:32-18:03
• Attack Discovery uses AI to provide first-pass triage and analysis of security alerts, helping analysts understand threats faster 29:50-30:58
Elastic's approach prioritizes accessibility, transparency, and user choice in security operations.
Sources:
- 2:15-2:25 Evolution from ELK stack to security platform
- 3:30-3:58 Free features without sales gating
- 7:01-7:30 Open detection rules in GitHub
- 10:01-10:14 Elastic Agent deployment
- 14:01-14:37(https://www.youtube.com/watch?v=7Z2zObdhN-Q&t=841
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Alrighty. Hi everyone. Thanks so much for tuning in. Look, I'm pretty excited to get together and join with a good friend, James. James Spiterry. I'm so sorry, James. Am I Am I going to get your your last name right? >> All right. Awesome. James is hanging out over at Elastic doing some incredible stuff. And I'm super excited to get a chance to learn all that you've been cooking up and how things been over in the Elastic world. >> Yeah, man. Like, thanks for having us. It's really good to be here. So, I've been at Elastic about 7 years now. had various different roles. Currently, what I'm doing is leading our product efforts for all the fun stuff with AI and automation these days. Uh I guess it's good for people to know. I come from a practitioner background. I've been doing sack ops my wh…