Registration

Welcome & Opening Note

^{_{Sascha Meyer, Elastic}}

Secure Intelligence & Fraud Investigations Through Agent-Driven Search
_{Financial institutions must support fraud, intelligence, and digital forensics investigations while operating under strict security and data-sovereignty constraints. Yet critical information remains distributed across many systems, slowing down analysis and decision-making.
This project presents a secure, agent-driven search architecture that enables investigators to access and analyze distributed data without moving or centralizing sensitive information. Using AI agents and automated workflows, the solution delivers a unified, intelligent search experience that accelerates investigations while fully respecting regulatory and security requirements.}

^{_{Jonas Belbel, Elastic}}

Cyber threat: your next attacker already has a permanent contract at your company

_{Cybersecurity is often thought of as a fortress, designed to repel external attacks. Yet some of the most critical threats originate from within the organization itself. Malicious employees, compromised accounts, or overly permissive access exploit trust and bypass traditional defenses.}

_{This talk breaks down insider threats—their mechanisms, early warning signs, and concrete Elastic-based approaches to better detect and prevent them, without turning the company into a paranoid fortress.}

^{_{Jérémy Voisin, Director Cyberdefense and CISO Cheops Technology Switzerland}}

How to Train Your Agent: Kubernetes Observability with OpenTelemetry

_{Cloud-native infrastructure evolves fast and breaks in ways that are hard to predict. In this session, we explore how to collect Kubernetes signals with OpenTelemetry and teach an AI Agent to reason like an SRE — from symptom to root cause to remediation.}

^{_{Eva Ramon, Elastic}}

Staying Neutral: Multi-Tenant Elastic Security Cluster in Switzerland

_{Switzerland stays neutral on many things, but not on data sovereignty. We'll share how we built a secure multi-tenant ELK cluster hosted locally, the security architecture protecting each customer's data, and how we adapted to stay efficient with the market evolution.}

^{_{Romain PETRO, Lead Solutions Architect at Swiss Post Cybersecurity}}

EASE your way into AI. Zero disruption

_{Elastic’s AI SOC Engine (EASE) layers AI into your existing stack. Correlate alerts, prioritize threats, and guide workflow responses without a full SIEM replacement. EASE launches in minutes on a SaaS architecture. Connect to your existing SIEM, EDR, and contextual data sources with agentless integrations and get immediate value without disruption.}

_{For security teams, especially those frustrated by the limitations of their current SIEM, and also hesitant to move due to the effort involved in migration and replatform, EASE offers instant value — without requiring a full migration.
Customers can immediately leverage Elastic’s Gen-AI features, such as ""Attack Discovery"" and ""AI Assistant,"" by applying them to alerts gathered by their existing SIEM.}

^{_{Sebastien Michel, Elastic}}

Summary

Networking

Event Close