Wiz, Inc.

Jonathan Doron

Amir Lande Blau

Udi Reitblat

Eliad Peller

Arik Nemtsov

Gal De Leon

Shahar Yakov

Michael Aminov

A system and method for cybersecurity threat detection using an activity baseline generated based on sensor-detected runtime execution data is presented. The method includes: receiving aggregated runtime data from a sensor deployed on a resource in a cloud computing environment; generating an event log based on the aggregated runtime data, each event in the event log generated by extracting data from the aggregated runtime data; generating an activity baseline for a process executed on the resource based on the event log; receiving a new event from the sensor; and determining that the new event is anomalous based on the generated activity baseline.

Cybersecurity threat detection utilizing sensor-based aggregated runtime execution data

Growing community of inventors

Herzliya, Israel

Jonathan Doron