Mapping Motives Tells a Story: Analysis of 2,000 Enterprise Cloud Detec...
summary
Analysis of roughly 6,000 live cloud detections across ~400 customers maps alerts to the MITRE ATT&CK Cloud matrix and yields concrete gaps: out-of-the-box detections are crucial for multi-cloud SOCs, MSPs build most custom rules, and many deployments lack execution-stage and data exfiltration detections. The team builds machine learning classifiers for MITRE and zero trust labeling, extracts verb–noun attacker actions, and produces SIEM-agnostic metadata that lets a SOC group alerts into five coherent control buckets spanning AWS, Azure, GCP, Office 365 and workspaces.
AI-written summary · about
chapters (5)
- 0:00Start
- 0:10Mapping Motives Tells a Story
- 7:25Research Methods and Scope
- 27:33Alert Management: Devo SOC Performance Report
- 28:33Alert Management: Zero Trust Framework
related talks
40mMITRE ATT&CK® as a Framework for Cloud Threat Investigation
11mReimagining the MITRE ATT&CK F...
37mOptimizing Cloud Detection & Response With Security Chaos Engineering
15mThe origin of security challenges & a revolutionary solution
18mSecuring cloud innovation: Lessons learned
01h 00mMaximising Security with Threat Modelling in the Cloud
38mCyber risk management: Bringing security to the boardroom
48mMITRE ATT&CK: The Play at Home Edition