Google Cloud Unveils New Cloud Analytics Project for Improved Threat Detection

Google Cloud on Monday announced the Cloud Analytics project by the MITRE Engenuity Center for Threat-Informed Defense. Google Cloud and several other industry collaborators are sponsoring it.

Since 2021, Google Cloud has partnered with the center to develop open-source security analytics. Earlier this year, it introduced Community Security Analytics (CSA) in collaboration with the center. It provides pre-built and customizable queries to help detect threats in workloads, and to audit cloud usage. The Cloud Analytics project is designed to complement CSA.

The Cloud Analytics project includes a set of detection analytics for key tactics, techniques and procedures (TTPs), along with their adversary emulation plans implemented with Caldera framework.

Both CSA and the Cloud Analytics project are community-driven security analytics resources.

Similar to CSA, Cloud Analytics can help lower the barrier for threat hunters and detection engineers to create cloud-specific security analytics.

Security analytics is complex because it requires knowledge of diverse security signals from different cloud providers along with their specific schemas. In addition, it requires familiarity with adversary behaviors in cloud environments.

Google’s Roy Arsan

Roy Arsan is cloud solutions architect at Google.