Modern Approach to Multi‐Cloud Threat Hunting

A multi‐cloud architecture utilizes two or more public clouds as well as multiple cloud service providers with the aim of eliminating the dependency and achieving a higher level of resiliency within the environment. There are different types of threat‐hunting commercial products and services offered by different vendors and service providers that could meet the challenges. Security‐as‐a‐Service is one such approach that allows customers to subscribe and deploy into their multi‐tenant cloud environment to boost their incident response and threat‐hunting capabilities. The Security Operations Center (SOC) model can include an onsite dedicated SOC, outsourced SOC, or both. Threat hunters constantly look for suspicious activity, codes, and unauthorized activity prior to data exfiltration, ransomware attacks, or advanced persistent threats. Cybersecurity resiliency includes starting with the right mindset, technology, approach, focus on hygiene, and measurement of success.