Competing for cloud security talent—win without the fight (PRT043)
summary
Uptycs claims it removes the need to hire rare cloud-forensics experts by normalizing CloudTrail, VPC Flow Logs and AWS Config and surfacing actionable detections with remediation. Examples include detecting five API calls that perform policy reversion, spotting EC2 instances used to deploy reverse shells and mapping the exact API sequence to exfiltrate data via EBS snapshot sharing with an external account. The product is billed as Cloud detection and response with timelines, metadata and suggested fixes.
AI-written summary · about
chapters (6)
- 0:00Introduction and delay
- 0:28Why not compete for cloud talent
- 2:19Cloud detection and response explained
- 3:48Thinking like a threat actor
- 6:43Actionable threat detection examples
- 9:11Focus on core business instead
related talks
43mThreat hunting in the cloud
14mConfidence in cloud security: One step ahead of cyber threats
37mOptimizing Cloud Detection & Response With Security Chaos Engineering
14mThe power of preventative cloud security with Tenable and
40mBeyond Public Buckets: Lessons Learned on Attack Detection in the Cloud
18mHow AWS Partners use observability to strengthen customer security
32mAdvanced threat detection and response on AWS
51mCloudSec Hero to Zero: Self-Obsolescing Through Prolific Efficiency