Browse a library of EQL analytics now natively integrated in Elasticsearch since Endgame joined forces with Elastic. EQL in Elasticsearch accommodates non-security users with changes summarized in the Elasticsearch EQL documentation. Get started by installing the EQL module with Python 2.7 and 3.5+, then try a sample json file and test it with EQL commands.
Common questions about Event Query Language (EQL) including features, pricing, alternatives, and user reviews.
Event Query Language (EQL) is Browse a library of EQL analytics now natively integrated in Elasticsearch. It is a Security Operations solution designed to help security teams with Log Management.
A tool collection for filtering and visualizing logon events, designed for experienced DFIR specialists in threat hunting and incident response.
A managed security service that uses hypothesis-based threat hunting to proactively discover hidden threats, create new detection rules, and improve overall security posture.