Open XDR integration enriches Sysdig CDR signals to correlate and identify Malicious Operations across the broader enterprise.
As organizations increase investment across cloud services and infrastructure, unique challenges arise around excessive permissions, misconfigurations, and unsecured resources. This adds uncertainty and additional work for security teams, who must manage risk at the pace of business while still protecting the complete corporate environment. We’re excited to be partnering with Sysdig, a leader in cloud detection and response, to integrate our platforms and enable teams to manage cloud risk with XDR context from the broader enterprise.
Sysdig’s cloud-native application protection platform (CNAPP) offers real-time Cloud Detection and Response (CDR), as well as vulnerability, entitlement and posture management. Combined with Cybereason XDR, organizations can extend protection and operation-centric threat detection and response across the complete organization, enabling teams to secure their most valuable assets in a time-efficient, visual manner.
Highlights of the planned integration, with General Availability targeting Q4 2023, include:
Important Cloud Detection and Response events identified by Sysdig are transmitted to Cybereason XDR (it pulls these from the Sysdig API). Cybereason XDR will ingest and display this information as a part of its “Suspicious Events”. XDR then further correlates these events with activity from Endpoint, Network, Identity, and Cloud data sources within Cybereason.
High-priority threats, known as MalOps, will be displayed as visual attack stories, complete with response recommendations and triage from the 24/7 Cybereason Managed Detection and Response team.
The above shows a spear-phishing attack visualized within Cybereason XDR with data from Sysdig about AWS Cloud accounts being compromised. Sysdig alerts Cybereason that a disallowed user for AWS has elevated his/her privileges, then Cybereason correlates that this user did have an anomalous login and may have had the AWS account credential compromised via spear phishing attack.
This integration is a significant development in the Cybereason & Sysdig partnership. By combining our strengths, we aim to create a solution that will help customers better protect their complete cloud risk.
Roadmap Disclaimer
This document contains forward looking statements. All information relating to product roadmap and/or future functionality/capabilities is provided solely as a non-binding expression of the present intent and is not and should not be deemed to constitute any form of commitment, promise or legal obligation to develop, offer or deliver any product, upgrade, enhancement, software, hardware, documentation or functionality whatsoever. The development (if any), release (if any) and timing of any feature or functionality is and will remain at the Parties’ sole and absolute discretion.
The Cybereason Global SOC Team delivers 24/7 Managed Detection and Response services to customers on every continent. Led by cybersecurity experts with experience working for government, the military and multiple industry verticals, the Cybereason Global SOC Team continuously hunts for the most sophisticated and pervasive threats to support our mission to end cyberattacks on the endpoint, across the enterprise, and everywhere the battle moves.
All Posts by Cybereason Global SOC Team
Cybereason named to three Built in Boston’s Best Places to Work lists for 2022: Boston Best Places to Work, Boston Best Paying Companies, and Boston Best Large Companies to Work For...
"When I first joined, I heard about the 'Defender' concept so much I almost felt skeptical, but the Defender vibe is real, it’s in the DNA of the company - the people here really believe in what we do..."
