Cloud Analytics

Project Summary

Published : Jul 28, 2022

The Cloud Analytics project sought to advance the state of the practice by developing a blueprint for writing analytics for cloud platforms. To create the blueprint, the team “learned by doing” – exercising adversary behaviors, developing analytics, and refining them. Lessons learned were gathered along the way and incorporated into the analytics blueprint shared with the community.

Problem

Defenders achieve sufficient visibility of adversary behaviors in on-premises environments, but they struggle to achieve comparable visibility in cloud environments.

SOLUTION

Developed a foundational set of cloud analytics for key TTPs and captured best practices and lessons learned in an analytics blueprint document.

IMPACT

Improves defenders’ ability to develop analytics to detect adversary behaviors in cloud environments.

Project Resources:

funding Research Participants

Share This Project

Explore More of Our Work

Silhouette of mountain climber at summit helping climber below climb a rope.

Center For Threat-Informed Defense Project

Summiting The Pyramid

September 13, 2023

two yellow cable cars at station

Center For Threat-Informed Defense Project

THREAT REPORT ATT&CK MAPPER (TRAM)

August 28, 2023

A group of people collaborating on an ATT&CK Workbench whiteboard.

Center For Threat-Informed Defense Project

ATT&CK Workbench

August 15, 2023

Stay Informed

Stay informed about new releases of R&D projects and other exciting updates from the Center for Threat-Informed Defense.