Use Case Intelligence RSS Search use cases Search
Microsoft Manufacturing United States

Eastman

Security and Compliance

Eastman constantly asks, “What if…?” Chances are that you’ve enjoyed some of its everyday household items made from Eastman materials. Maybe you’ve worn clothing made from Eastman cellulose fabrics.

Read the original story Explore all use cases

Reported impact

Business outcome

Keown can attest to how those capabilities inspire his SOC team. “I enjoy the passion I see ignited in our teams,” he says.

  • Risk Reduction

Solution

Eastman constantly asks, “What if…?” Chances are that you’ve enjoyed some of its everyday household items made from Eastman materials. Maybe you’ve worn clothing made from Eastman cellulose fabrics. Millions of people around the world depend on Eastman products across the agriculture, personal care, transportation, textile, and consumer goods markets. Apart from the trove of intellectual property that underpins Eastman’s Fortune 500 ranking, the company relies on a vast global network of suppliers and other relationships. The data from that dynamic network and sizeable IP translate to a significant attack surface. The stakes are high. “As a globally distributed company, we influence the world’s economy,” explains Adam Keown, Chief Information Security Officer at Eastman. “Whether it’s transportation, supply chain, the circular economy, or our work to help make a better world, we have an impact.

Data flow

The data from that dynamic network and sizeable IP translate to a significant attack surface. Writing KQL queries to cut through large amounts of security incident data from applications like Microsoft Defender for Endpoint and Microsoft Defender for Identity to quickly identify the scope and potential impact of an incident is an essential skill for security analysts.

Solution architecture

3 components · 2 layers
  1. Ingest
    • Microsoft Defender for Endpoint Supplies endpoint telemetry and detections for security investigation and response.
    • Microsoft Defender for Identity Supplies identity-focused detections and signals for security investigation and response.
  2. Serving
    • Copilot for Security Accelerates threat investigation, KQL generation, and incident response with generative AI assistance.

Architecture clues

  • And our customers, employees, and shareholders rely on us to ensure that the business endures.” The exposure never stops, whether from third-party activities or law firms handling Eastman data.
  • Baysal was pleased to have the team be a Microsoft design partner for Copilot for Security in early 2023.
  • Early in the Copilot for Security design process, Yates and his team identified the critical skill of Kusto Query Language (KQL) coding as an apt activity for Copilot for Security acceleration.
  • The data from that dynamic network and sizeable IP translate to a significant attack surface.
  • “We believe that using Copilot for Security is going to get us to the next level of cybersecurity opportunity,” Baysal adds.
  • “We’ll be able to better serve our customers and enhance our data protection.”

Evidence from the source

Baysal was pleased to have the team be a Microsoft design partner for Copilot for Security in early 2023.
Efficiency is crucial.” A multinational company’s global reach complicates mitigation.
Safeguarding the “tomorrow” ideas everyone envies
The team uses Microsoft Defender solutions to protect workloads across the productivity apps in its Microsoft 365 E5 license.
“We believe that using Copilot for Security is going to get us to the next level of cybersecurity opportunity,” Baysal adds.
“We were amazed at how quickly the Microsoft team provided the base solution.” Baysal details the list his team provided: a way to expand the team’s skills to avoid adding a new person for its growing workloads, upskilling junior analysts, reducing incident response times, and accelerating playbooks for phishing and other threat types.
Transparency Evidence & methodology 66/100 reference value · 87% confidence · 1 source

Review how this reference was scored and trace each normalized claim back to its documented source.

01

Scoring methodology

How scores are calculated

Customer Reference Value measures usefulness as a customer reference. Evidence Confidence measures the quality and traceability of available evidence, not independent verification.

Customer reference value66/100
  • Problem clarity20/20
    Measures whether the customer's operational problem is specific enough to compare.
  • Implementation depth20/25
    Rewards named components, data flow, integrations, and architecture detail.
  • Outcome specificity16/20
    Measures whether the reported benefit is concrete rather than a generic claim.
  • Quantified impact0/25
    0 metrics describe measurable impact.
  • Deployment scale10/10
    Rewards evidence of a live or scaled deployment and meaningful integration scope.
Evidence confidence87%
  • Source authority20/25
    The main evidence is an official vendor-published customer story.
  • Claim traceability21/25
    10 of 12 key fields link to a named source.
  • Direct evidence20/20
    6 direct source quotes retained.
  • Date provenance10/10
    The publication date comes from the source page or publisher.
  • Source transparency8/10
    1 source reference document publisher, URL, authority, retrieval, and supported fields.
  • Implementation specificity8/10
    Rewards source-backed components, data flow, quantified impact, and a specific outcome.
02

Traceability

Sources & provenance

Field coverage shows which facts each source supports. Dates are shown only when documented by the source.

  1. Microsoft

    Eastman customer story

    First-party
    https://www.microsoft.com/en/customers/story/1802842951607118817-eastman-microsoft-defender-other-en-united-states
    Source type
    Vendor-published customer story
    Published
    Aug 20, 2024
    Supports
    • Customer
    • Business problem
    • Solution
    • Products
    • Solution components
    • Data flow
    • Integrations
    • technical area
    • use case category
    • Business outcome
    • outcome category
    • Metrics
    • Architecture
    • evidence quotes
    • Publication date

Date evidence

  • Published on source page Aug 20, 2024 · Microsoft · First-party
    Open date source
Not separately sourced Industry, Region, Company size. Treat these normalized attributes as lower-confidence until a dedicated source is added.

Related

Similar use cases

See all like this
Google Cloud Archived · Oct 9, 2026 Delta ESG Consulting Office Manufacturing Taiwan Driven by its mission "to provide innovative, clean and energy-efficient solutions for a better tomorrow," Delta Electronics , a global leader in power and thermal management, has developed deep sustainability expertise… 4-Minute Compliance Insights: Generates cross-border regulatory assessments, gap analyses and actionable… Document ProcessingSecurity and Compliance Agent Development Kit (ADK) · Agent Platform · Gemini 3.1 Flash-Lite OpenAI Oct 28, 2025 Dai Nippon Printing Manufacturing Asia-Pacific & Oceania DNP needed to preserve institutional knowledge, standardize inconsistent expert work, and automate research, security, and operations tasks across a very large industrial enterprise facing labor constraints and complex… 100% weekly active usage rate Document ProcessingEnterprise Knowledge Search ChatGPT Enterprise · custom GPTs · internal knowledge base Microsoft Sep 25, 2025 St. Luke’s University Health Network Healthcare United States St. Luke’s—with 15 campuses, 300 outpatient sites, 23,000+ employees, and 2.5+ petabytes of patient data—needed unified, real-time visibility across a previously disconnected security stack so its SOC could anticipate… 15 campuses and 300 outpatient sites IT Operations AutomationSecurity and Compliance Azure Monitor & Log Analytics · Microsoft Defender · Microsoft Entra