Wiz, Inc.

Gal De Leon

Udi Reitblat

Eliad Peller

Shai Keren

Amir Lande Blau

Arik Nemtsov

Shahar Yakov

Jonathan Doron

Yonatan Doron

Michael Aminov

A system and method for cybersecurity threat detection using an activity baseline generated based on sensor-detected runtime execution data is presented. The method includes: receiving aggregated runtime data from a sensor deployed on a resource in a cloud computing environment; generating an event log based on the aggregated runtime data, each event in the event log generated by extracting data from the aggregated runtime data; generating an activity baseline for a process executed on the resource based on the event log; receiving a new event from the sensor; and determining that the new event is anomalous based on the generated activity baseline.

Cybersecurity threat detection utilizing sensor-based aggregated runtime execution data

A system and method for validating cybersecurity issues utilizing runtime data is disclosed. In an embodiment the method includes: inspecting a workload deployed in a computing environment for a cybersecurity issue; deploying a sensor on the workload, the sensor configured to collect runtime data from the workload; initiating a first mitigation action with a first priority in the computing environment in response to validating the cybersecurity issue from the collected runtime data; initiating a second mitigation action with a second priority, which is lower than the first priority, in response to failing to validate the cybersecurity issue from the collected runtime data.

Cybersecurity vulnerability validation techniques utilizing runtime data, static analysis and dynamic inspection

Growing community of inventors

Tel Aviv, Israel

Gal De Leon