Skip to content

Commit 2e1a762

Browse files
susan-shu-cjmikell821benironside
authored andcommitted
Update ML page with anomaly detection jobs from Elastic integrations (#3648)
* ML page - update subsection * Update wording, test linking internal ref * Update broken link * Add url subsection * PR review * Update docs/detections/machine-learning/machine-learning.asciidoc Co-authored-by: Janeen Mikell Roberts <[email protected]> * Update docs/detections/machine-learning/machine-learning.asciidoc Co-authored-by: Benjamin Ironside Goldstein <[email protected]> * Update docs/detections/machine-learning/machine-learning.asciidoc Co-authored-by: Janeen Mikell Roberts <[email protected]> * Remove subsection in url breaking the build * Update docs/detections/machine-learning/machine-learning.asciidoc Co-authored-by: Janeen Mikell Roberts <[email protected]> * Update capitalization * Update docs/detections/machine-learning/machine-learning.asciidoc Co-authored-by: Janeen Mikell Roberts <[email protected]> * Capitalization --------- Co-authored-by: Janeen Mikell Roberts <[email protected]> Co-authored-by: Benjamin Ironside Goldstein <[email protected]> (cherry picked from commit 27cd7fe)
1 parent 68a2336 commit 2e1a762

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

docs/detections/machine-learning/machine-learning.asciidoc

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -66,6 +66,10 @@ Or
6666
* Your shipped data is ECS-compliant, and {kib} is configured with the shipped
6767
data's index patterns in *{kib}* -> *{stack-manage-app}* -> *Data Views*.
6868

69+
Or
70+
71+
* You install one or more of the Advanced Analytics integrations (refer to the following section).
72+
6973
<<prebuilt-ml-jobs>> describes all available {ml} jobs and lists which ECS
7074
fields are required on your hosts when you are not using {beats} or the {agent}
7175
to ship your data. For information on tuning anomaly results to reduce the
@@ -76,6 +80,19 @@ prior to the time they are enabled. After jobs are enabled, they continuously
7680
analyze incoming data. When jobs are stopped and restarted within the two-week
7781
time frame, previously analyzed data is not processed again.
7882

83+
[float]
84+
[[ml-integrations]]
85+
=== Jobs in Advanced Analytics (UEBA) Elastic integrations
86+
87+
You can also install {ml} jobs using https://docs.elastic.co/integrations[Elastic integrations]. Here are the Advanced Analytics integrations available for Security:
88+
89+
* https://docs.elastic.co/integrations/ded[Data Exfiltration Detection]
90+
* https://docs.elastic.co/integrations/dga[Domain Generation Algorithm Detection]
91+
* https://docs.elastic.co/integrations/lmd[Lateral Movement Detection]
92+
* https://docs.elastic.co/integrations/problemchild[Living off the Land Attack Detection]
93+
94+
To learn more about {ml} jobs enabled by these integrations, refer to the https://www.elastic.co/guide/en/security/current/prebuilt-ml-jobs.html[Prebuilt jobs page].
95+
7996
[float]
8097
[[view-anomalies]]
8198
== View detected anomalies

0 commit comments

Comments
 (0)