Ep. 38 In a town full of secrets, the best-kept secret

If you were to do a “thought cloud” of technology, you would see the usual suspects, companies like Microsoft, AWS, and Google.

Nobody would include Elastic Search in this discussion, yet it is seen all over the place, perhaps the best kept secret in federal technology. Because it is capable of being modified in so many ways, it is difficult to categorize it. Elastic is a flexible tool that allows a federal agency to gain visibility on a wide range of fronts.  

As a result, we see many federal projects where Elastic is in the background acting as the “glue” to get information from disparate sources. 

Elastic is based on open-source code. During the interview, Christopher Towsend from Elastic defines the difference between Open Source and Open Security, referencing Elastic Search Technology.

Let’s toss around some cybersecurity concepts that may produce data for a federal agency.  You may have systems that handle Security Information Event Management (SIEM), Security Orchestration Automation Response (SOAR), Extended Security Response (XDR), and even the lowly Endpoint Security (still seeking a snappy acronym).

Because this is such a complex topic, Elastic has put together a free report titled, “Elastic 2022 Global Threat Report: A Roadmap for Navigating Today’s Growing Threatscape”