Case Study: LEITWERK AG's CYBER FOX cuts digital forensics from weeks to days with Elastic Security

LEITWERK AG cuts digital forensics from 3 weeks to 3 days with Elastic

LEITWERK AG's CYBER FOX team, the cybersecurity arm of a German IT operations company, faced significant challenges with their previous security tool. Their old solution was limited to a single agent on a single platform, preventing integration with firewall and other IT data and creating blind spots. This restriction also made sales cycles difficult, as they had to convince each customer to replace their existing EDR software first. The team needed a more flexible and comprehensive platform to serve their diverse clients while complying with strict data residency regulations like GDPR.

The vendor Elastic provided the solution with its Elastic Security platform. CYBER FOX deployed a self-hosted Elasticsearch cluster in their own data centers, running SIEM and Elastic Defend. This gave analysts full visibility into granular log data from any source, including endpoints, firewalls, and Microsoft services. The implementation dramatically accelerated their digital forensics process, reducing the time required from three-to-four weeks down to just three-to-four days. Using Elastic, the team successfully onboarded 30 managed-SOC customers in nine months and plans to add 30 more the following year.

LEITWERK AG