Software & Technology (Search & Security)Sourced
Case Study: Elastic saves 750 days of analyst time a year with Tines
Elastic Case StudySourced & dated by Case Study Desk
Key results
The challenge
Elastic's security team needed to automate alert investigation and triage in a way that both coders and non-coders could build and maintain, while working through a large backlog of automation candidates.
The solution
Elastic built workflows in Tines for alert investigation, triage, and case management, integrating Slack, GitHub, and its SIEM.
“Tines is doing the work of at least 3 FTEs and most importantly is allowing us to be more thorough in the work that we do.”
DGDaniel GallagherSecurity Automation Engineer, Elastic
The results, in context
Elastic reported saving over 750 days of analyst time in a 12-month period, having deployed 49 workflows. A single alert-investigation workflow processed the equivalent of 93 days of work in one week.
Products used
Tines Tines Stories (workflows)