Guest:

Topics:

Cloud Detection and Response (CDR) vs Cloud Investigation and Response Automation(CIRA) ... what’s the story here? There is an “R” in CDR, right?
Can’t my (modern) SIEM/SOAR do that? What about this becoming a part of modern SIEM/SOAR in the future?
What gets better when you deploy a CIRA (a) and your CIRA in particular (b)?
Ephemerality and security, what are the fun overlaps? Does “E” help “S” or hurts it? What about compliance? Ephemeral compliance sounds iffy…
Cloud investigations, what is special about them?
How does CSPM intersect with this? Is CIRA part of CNAPP?
A secret question, need to listen for it!

Resources:

EP216 Ephemeral Clouds, Lasting Security: CIRA, CDR, and the Future of Cloud Investigations

Cloud Security Podcast by Google