✳flâneur — a map of the web's best reading

A guide to threat hunting and monitoring in Snowflake | Datadog Security Labs

securitylabs.datadoghq.com · 2,941 words · saved by 1 readers

Snowflake is a cloud-based data platform that provides a fully managed, scalable solution for storing, processing, and analyzing large data volumes on AWS, Microsoft Azure, and Google Cloud. In light of an emerging threat currently targeting Snowflake customers, we're releasing a detailed guide to threat hunting in your Snowflake environment. This post will give you the queries and context needed to conduct a thorough analysis of your Snowflake instances and create threat detections based on your findings. This post builds on top of the excellent work done by the team at Rezonate in their post "Threat-Hunting for Identity Threats in Snowflake" and also includes the prospective guidance that Snowflake has released to help customers track down the recent threat mentioned above. An attacker who has successfully compromised Snowflake credentials can access and exfiltrate sensitive data stored within Snowflake. In order to investigate initial access attempts and subsequent behaviors, there

Julie Agnes Sparks Detection Engineer Seth Art Cloud Security Researcher and Advocate Snowflake is a cloud-based data platform that provides a fully managed, scalable solution for storing, processing, and analyzing large data volumes on AWS, Microsoft Azure, and Google Cloud. In light of an emerging threat currently targeting Snowflake customers, we're releasing a detailed guide to threat hunting in your Snowflake environment. This post will give you the queries and context needed to conduct a thorough analysis of your Snowflake instances and create threat detections based on your findings. Th

Explore this link on the map →

related reading