Sysdig Details Malware Detection and Blocking for Cloud Workloads
Summary
Sysdig says its cloud detection and response uses file-write and execution monitoring, YARA rules, signatures and intelligence feeds to detect and block malware across cloud, hybrid and on-prem workloads.
Key points
- Sysdig says cloud malware can be fast and short-lived, making legacy endpoint detection models less suited to ephemeral workloads.
- The product combines file-write and execution monitoring with YARA rules, signatures, intelligence feeds and behavioral runtime detection.
- Sysdig says runtime blocking can stop a malicious binary before it loads into memory.
- The company describes coverage for containers, Kubernetes, virtual machines, serverless, and cloud, hybrid and on-prem environments, including AWS Fargate.
- Sysdig says its Threat Research Team maintains more than 250,000 malware-detection artifacts and more than 1,400 rules.
Article Details
- Event Type
- Cybersecurity product capability overview
- Impact
- Sysdig says its cloud detection and response can detect malware when it is written to disk or executed, and block malicious binaries before they run. The article describes intended benefits including earlier detection, faster containment, and consistent protection across cloud, hybrid, on-premises, Kubernetes, virtual machine, and serverless environments. It reports no specific incident or measured customer impact.