Elastic
- Aliases / services
- エラスティック / Elastic APM / Elasticsearch / Elastic
- Official website
- https://www.elastic.co/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Elastic APM PHP Agent
- Response status
- Compatibility fix for patched PHP available
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Provides search, observability and security analytics.
Agent 1.17.1 fixes request-shutdown crashes on PHP containing the security fix, such as PHP 8.3.36.
Scope: This is agent compatibility remediation, not a substitute for patching PHP or a claim about Elastic Security detections.
What users should do
Patch PHP and install a compatible agent containing the 1.17.1 fix; restart and verify application and monitoring data.
Official service URL
Source URLs
- https://www.elastic.co/docs/release-notes/apm/agents/phphttps://www.elastic.co/docs/release-notes/apm/agents/phpResponse evidence
- https://github.com/elastic/apm-agent-php/pull/1510https://github.com/elastic/apm-agent-php/pull/1510Service and operation documentation
Elastic Security (Elastic Defend / SIEM)
- Response status
- Behavioral detection available
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Detects suspicious web-server child processes and file activity; applicable endpoint rules can block actions in prevention mode.
Scope: Coverage is not guaranteed for every attack and is separate from the APM agent compatibility fix.
What users should do
Patch PHP and enable relevant rules and process/file telemetry.
Source URLs
- https://www.elastic.co/security-labs/threat-command/php2shell-php-rce-detectionhttps://www.elastic.co/security-labs/threat-command/php2shell-php-rce-detectionResponse evidence
Related official sources
- Setting up the Elastic APM PHP AgentOfficial information directory
Comments