I-SIEM: Intelligent Security Information and Event Management
The shift from classic Elastic SIEM to I-SIEM means the system is no longer just a central log and event repository, but a truly intelligent analysis tool.
- Utilizes AI/ML for automatic pattern recognition and anomaly detection.
- Proactively explains to the analyst why something poses a risk.
- Prioritizes incidents based on business impact and context.
- Continuously learns from real incidents, false positives, and feedback.
- Also provides natural language answers („Why was this alert triggered?“).
[*]Elastic SIEM: Introduction to SIEM and Elastic SIEM.
[*]Events, Alerts, Attack Discovery: Brief description of Elastic SIEM’s functionalities.
[*]LLM Integration: Configuration of LLMs and possible options (with demo).
[*]Elastic AI Assistant: How the AI Assistant is used in various contexts (event, alert, attack detection, automatic import) and the possibilities it offers (with demo).
[*]Data Protection: How to protect your data when working with generative AI and LLMs (with demo).
The webinar will take place on September 18th at 10 AM (approx. 30 minutes duration) and will be held in English. We will repeat the webinar in German in October.
About the Speaker:
Arsal Jalib, Senior Consultant Search & Analytics at SHI GmbH
Arsal Jalib completed his Master’s in Computer Science at TU Berlin with his thesis on „Deep Learning.“ He possesses extensive experience in software and web development, as well as in automating processes that previously required manual intervention. He worked for several years as a Software Quality Officer and Software Developer. In his role as a consultant at SHI, he participates in various projects in the areas of Search, Analytics, Data Science, and Security. These projects involve building search systems using tools like Apache NiFi, Apache Solr, OpenSearch, and the Elastic Stack.