Securing hybrid cloud environments
summary
Hybrid environments send all logs—cloud and on‑prem—into an Axle Beam data lake that baselines users and entities, builds peer‑group behavioral models, and scores anomalies; a 90‑point notable threshold kicks automated playbooks that enrich tickets, query VirusTotal and lock accounts. Detections include first‑time asset access, cross‑account credential switches, and high‑volume exfiltration (demo shows 3.3 GB upload and a 0.5 TB payroll export), with integrations into AD, VPN logs, Palo Alto and GitHub.
AI-written summary · about
chapters (7)
- 0:00Start
- 5:19Security in Hybrid Clouds
- 10:52Axle Beam Data Lake
- 14:39How Does Advanced Analytics Look
- 15:14Account Lockout
- 17:46Peer Groups
- 24:37Credential Switching
related talks
48mLateral Movement in the Age of Hybrid Cloud
11mReducing exposure in the cloud
42mThreat Detection across all environments with SnowflakeData Security Lake
12mSecurity data gravity: Visibility & threat detection for data lakes
40mMulti-Cloud Anomaly Detection: Finding Threats Among Us in the Big 3 Clouds
01h 02mAzure Identity and Security
18mCloud security is a shared responsibility: What does that really mean?
28mPatterns for scalable security detections on AWS