General Security Discussion

Discussion and thought leadership on the cloud security industry

6 Topics

CISO Tim
CISO TimParticipant
posted in Prioritizing Risk

How do you quantify risk?

Risk is a hard thing to quantify at times.  But I think having a good understanding of your security risk can elevate the conversation at the executive level. It can tie security problems to business outcomes, which can ultimately help make a stronger security program and get more budget.   How do people quantify risk in your organization? AgentN/APlatformUsing Lacework/OperationalizingCloudN/A

8
jth
7 days ago
J
josehelpsParticipant
posted in Threat Hunting

LOLDrivers Lacework LQL Detection

Hey everyone,I wanted to share something valuable with the community, especially since a few customers have inquired about this recently. We all know the significance of staying a step ahead in the cybersecurity landscape, and this is a step in that direction.LOLDrivers is a well-curated list of Windows drivers that adversaries commonly use to bypass security measures and execute attacks. It has been used quite often by many threat actors: https://cybernews.com/security/bring-your-own-vulnerable-driver-attack/.I've crafted a script that automatically fetches the latest malicious hashes from the LOLDrivers project and builds an LQL rule, which can be seamlessly deployed in your Lacework environment. This script serves as a tool to monitor and detect malicious drivers in real-time within your infrastructure.Here's how you can integrate this into your Lacework setup:1. Get the Script: Grab the script from this link.   2. Deploy the LQL Rule: Use the Lacework CLI with the following command

0
J
19 days ago
A
Andrew LeeParticipant
posted in Compliance and Audit

What CSPM reporting works best for you

Looking to get feedback on what types of reports or report data points must uesrs really care about or help them in there work flow.There is lots of data there but what do you really want to see and how would you like to see it AgentN/APlatformUsing Lacework/OperationalizingCloudN/A

0
A
20 days ago
Merritt Baer
Merritt BaerParticipant
asked in Least Privilege / Zero Trust

What frameworks do you find helpful for Zero Trust?

Since zero trust is not a concrete thing it’s a conceptual framework, what have you found useful for operationalizing the concept? AgentN/APlatformUsing Lacework/OperationalizingCloudN/A

1
Ben Sherman
22 days ago
CISO Tim
CISO TimParticipant
asked in What's Next in Security

LMM and Security

I know that GenAI is a very popular topic in the security industry right now.  But I am curious, how does everyone see this technology becoming useful in the security (or even more specifically the cloud security) world?  To me, it’s about helping security teams do more with less.  Using the technology to automate response to tasks that take up the time of engineers. Or it could be the first level of triage for an alert that can response and know a specific action to take.  Other thoughts? AgentN/APlatformUsing Lacework/OperationalizingCloudAWS

1
Ben Sherman
22 days ago
andyschneider
andyschneiderParticipant
posted in Compliance and Audit

NIS2

We just released a blog post around NIS2, an upcoming new regulation in the European Union that is very close to SEC and GDPR. Every business in scope will be required to report incidents to the relevant national bodies within a timeframe of 72 hours.https://www.lacework.com/blog/in-prep-for-nis2-cybersecurity-requirements/Reporting an incident requires the capability of detecting them. CSPM is not detection, CWPP and UEBA are. There are other interesting regulations that will follow (CRA - Cyber Resilience Act) that require more efforts in vulnerability management (e.g. CRA recommends SBOM).  AgentN/APlatformUsing Lacework/OperationalizingCloudN/A

0
andyschneider
27 days ago

Badge winners

Show all badges
Terms of UseCookie settings