Mitiga

### Overview In this presentation titled "Supercharging your SOC for the Cloud Era," Ofer Maor, co-founder and CTO of Mitiga, addresses the widening capabilities gap facing Security Operations Center (SOC) teams during cloud-based security incidents. Maor illustrates the challenge with a real-world scenario involving a CISO who struggled to determine whether their organization was impacted by the Sisense breach. With the public cloud market projected to reach $1 trillion within three years, attacks are increasingly traversing cloud environments. Maor emphasizes that while Cloud-Native Application Protection Platforms (CNAPPs) have helped DevOps and security teams handle cloud scale and complexity, SecOps has been left behind without appropriate tools to detect, investigate, and respond effectively in cloud and SaaS environments.

### Key Topics - **SecOps Cloud Gap:** The disparity between cloud security adoption in DevOps/CNAPP and the tooling available to SOC analysts. - **Cloud Security Data Lake:** Mitiga's architecture for aggregating petabytes of cloud and SaaS logs alongside contextual data. - **Contextual Threat Detection:** Delivering crisp, relevant alerts through a curated library of attack scenarios. - **Automated Investigation and Response:** Reducing response times from days to minutes through automated timeline generation and threat hunting.

### Technical Details Mitiga addresses cloud investigation challenges via several core architectural and operational components: - **Distributed Cloud Security Data Lake:** Collects up to petabytes of cloud and SaaS activity logs and contextual data to provide centralized visibility across chaotic environments. - **Cloud Attack Scenario Library:** Encapsulates years of research to filter noise and deliver contextualized, crisp alerts to SOC analysts. - **Investigation Workbench & Timeline Reconstruction:** Automatically builds end-to-end timelines tracing an attacker's movement across disparate cloud, identity, and SaaS footprints based on specific identities or resources. - **Automated Hunt Logic:** Enables immediate visibility into organizational exposure and security stance when major breaches occur, removing the requirement for deep specialized cloud expertise to conduct complex investigations.

### Takeaways Modern cloud-focused threats require SecOps teams to operate with cloud scale, speed, and context. Mitiga aims to supercharge SOC teams by providing automated correlation, visibility, and investigation tooling across identities, SaaS, and cloud footprints, enabling organizations—including over 40 leading brands already using the platform—to respond to incidents in minutes rather than days.