For security operations and incident response teams, multi-cloud environments (AWS, Azure, GCP, Okta, etc.) generate massive amounts of rich telemetry – but cloud detection, investigation, containment, and forensics can be challenging with traditional SOC tools. Not to mention the cost and complexity of log ingestion and enrichment.
Led by David Corral, the Global Head of Cybersecurity Architecture for Repsol, a Global 2000 multi-energy company, this educational webinar will explore why Repsol chose Gem's agentless cloud detection and response (CDR) platform to help transform its next-generation SOC for multi-cloud.
Joined by Gem's CTO, David will describe how the platform:
- Continuously pulls all of Repsol's cloud logs into a scalable data lake and correlates events across the control, identity, compute, data, and network planes.
- Increases effectiveness of cloud threat detection by combining detection rules/IOCs with a proprietary cloud UEBA model to filter out noise and detect truly anomalous behavior (IOBs).
- Addresses gaps not covered by shift-left CNAPP/CSPM tools which are focused on vulnerabilities and compliance vs. helping SecOps teams identify and mitigate active attacks.
- Provides cloud-native defenses including automated containment actions (deactivating access keys, isolating instances, etc.) and extraction/analysis of cloud forensic artifacts.
- Addresses gaps not covered by shift-left CNAPP/CSPM tools focused on vulnerabilities and compliance rather than helping SecOps teams identify and mitigate active attacks.