CloudGuard Runtime Protection in Action

[ivanmar]

In this video, we will see the CloudGuard Runtime Protection in action. After onboarding a Kubernetes cluster into CloudGuard, the Runtime Protection module will monitor the workloads running in the cluster, bot observe what processes are executed by them. It will build a behavioral profile to understand the standard behavior and will raise alerts when anomalous processes outside of this profile are observed. Apart from the behavioral engine, runtime protection includes a second engine based on malicious signatures, created by our research team. Events that match any of these signatures will also be flagged as malicious and CloudGuard will create alerts as well. CloudGuard Solution Family