Although organizations recognize the need for cloud-specific DFIR controls, a majority of security teams are — unsurprising — leaning on the traditional tools and processes they're familiar with. However, as cloud threats continue to grow in number and sophistication, it’s becoming increasingly clear that legacy DFIR methods and tools were not developed for cloud-based incidents. It takes too long, or often feels impossible, to get the data needed for a cloud investigation.
In this webinar, ESG experts Dave Gruber and Doug Cahill alongside Cado Security's CEO and co-founder & life-long DFIR-er James Campbell, dig into new cloud DFIR research findings and discuss best practices for implementing a cloud DFIR strategy.
Watch the webinar to learn:
- Current digital forensics strategies for cloud workload investigations
- How to overcome security obstacles associated with the use of containers and auto-scaling infrastructure
- How to drastically reduce time to evidence - going from days to minutes, leveraging cloud processing & automation techniques
- How to gain critical visibility across high-availability production systems, where an agent-based collection agent can't be deployed