Orca Security CDR alert detected
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Goal
Detect and respond to Cloud Detection and Response (CDR) alerts generated by Orca Security to prevent potential security breaches.
Strategy
Identify and trigger notifications for CDR alerts issued by Orca Security, indicating potential security threats.
Triage and response
- Assess the alert details, focusing on the category, type, and risk level.
- Analyze the alert context to determine the potential impact and scope of activity.
- Evaluate the risk associated with the alert, considering the sensitivity of the affected assets, potential compliance violations, and the likelihood of a security incident to guide decision-making and response prioritization.
- Follow the recommended course of action as described in the alert recommendation to contain and mitigate the threat.
- Implement mitigation measures to contain and remediate the activity that generated the alert, such as isolating affected systems, blocking malicious communication channels, and applying security controls to prevent further unauthorized access or data compromise.
- Report findings from the investigation, response actions taken, and recommendations for improving security controls to relevant stakeholders, security teams, and management to enhance visibility, communication, and incident response coordination.
