Elastic Security Labs

Elastic Security Labs is Elastic's in-house threat-research team, not a purchasable product — it publishes malware analysis, detection rules, and threat-intelligence reports that feed into Elastic Security but are also released free for any security team to read or reuse. Elastic launched Security Labs as a named, unified research domain on June 7, 2022, consolidating work a 40-plus-person research team had already been publishing piecemeal across Elastic's blog. Its output, including rules, YARA signatures, and write-ups on campaigns such as BLISTER and Log4Shell, is published at elastic.co/security-labs and on GitHub independent of any Elastic Security subscription.