Wiz Cloud Detection and Response (CDR)

Reported Context (12)

Wiz Cloud Detection and Response (CDR) monitors access logs for Snowflake accounts, databases, and tables in near real-time. Wiz Snowflake Connector Reaches General Availability with Data and Threat Security Features
Wiz CDR alerts you to API calls or connections (logged in flow logs or cloud logs) that originated in malicious IP addresses or using known bad user agents. How to Use Cloud-Specific Atomic IOCs to Detect Threat Activity
audit logs from any Kubernetes cluster, including EKS, AKS, GKE, or self-managed, and ingest them into Wiz CDR. This capability enables near-real-time visibility into your cluster control plane activity. It detects Wiz Adds Container Image Validation and Kubernetes Audit-Log Collection
Wiz customers can use Wiz CDR (Cloud Detection and Response) to detect emerging cloud threats in real-time, such as the following scenarios: Wiz Analyzes Midnight Blizzard’s Microsoft Breach and Suspected OAuth Attack Chain
Wiz Cloud Detection and Response (CDR) can also detect pre-signed URLs for SageMaker Notebooks, which would enable malicious actors to potentially gain access without any authentication. Wiz Adds Security Support for Amazon SageMaker

People (12)

Threat Actors (9)

MITRE ATT&CK (15)

Vendors (6)

Products (38)

Tools (9)

Industries (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.