Wiz Runtime Sensor Reaches General Availability With Expanded Cloud Threat Detection and Response
Summary
Wiz made its Runtime Sensor generally available for containerized workloads, adding detection customization, anomaly signals, container forensics, cloud-native response playbooks, and runtime validation of vulnerabilities in libraries.
Key points
- Wiz says the sensor detected campaigns including Pyloose and several cryptomining incidents during its public preview.
- New features include configurable detection ignore rules, centralized rule management, and anomaly detections that can raise alert severity.
- Container forensics and runtime execution data provide investigation context, while response playbooks can isolate affected nodes or remove excessive permissions.
- Runtime validation identifies vulnerabilities in libraries used by a workload and provides context to help prioritize risk.
- Wiz says support for modern Linux workloads on cloud virtual machines is planned for public preview later in the year.
Article Details
- Event Type
- Wiz Runtime Sensor general availability release
- Impact
- The release makes real-time threat detection and response available for containerized workloads. Features include customizable detection rules, anomaly alerts, container forensics, runtime execution data, response playbooks, and runtime validation of vulnerabilities affecting libraries in use.