SIEM · ENRICHMENT
Elastic + Etugen
Enrich Elastic events and alerts with Etugen’s risk-scored attacker infrastructure, right where your analysts already work.
What you get
- Indicator lookups from inside your searches and dashboards
- Category, location and a 0–100 risk score on every IP and domain
- Alarms on watched indicators delivered as events
- Your logs correlated against live C2 and malware hosting
How it works
Create an API key
Generate a key in your Etugen workspace. Keys are scoped to your organization.
Connect Elastic
Add the key to the Etugen integration in Elastic.
Start enriching
Indicators in your events are categorized and scored as they arrive.
More SIEM integrations
GET ACCESS
Put Etugen inside Elastic.
Every plan includes API access, starting with Free.
Get access View pricing