Sift Security Blog Integrating with AWS Inspector

CloudHunter Amazon Inspector IntegrationSift Security CloudHunter integrates with Amazon Inspector to enable enhanced detection, threat hunting, and accelerated incident response. Integrating AWS Inspector with CloudHunter allows organizations to take advantage of an additional security in the cloud. With AWS inspector you can:periodic files scans to identify mis-configurationsScan for insecure network protocolsScans application processes for bad default settingsScans for authentication best practices on AMI accounts.Scan installed operating system packages for a pre-determined list of CVEsKey Features Dashboards summarize the total number of vulnerabilities, the instances with the most vulnerabilities, and other context about vulnerabilities found by your scanner.The Graph Canvas offers a great way to explore the impact of vulnerabilities when investigating threats. Examples include visualizing all the instances that contain that vulnerability and linking those instances to other vulnerabilities.The graph canvas also enables users to take actions directly from the canvas, such as taking a snapshot, isolating or shutting down an instance.CloudHunter, Amazon Inspector findings will be used to enrich Detection results. For example, if Inspector identifies a vulnerable network service, and that network service is actively being used, CloudHunter will raise a high priority alert, indicating the vulnerability may have been exploited (coming soon).About Amazon Inspector Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Amazon Inspector automatically assesses applications for vulnerabilities or deviations from best practices. After performing an assessment, Amazon Inspector produces a detailed list of security findings prioritized by level of severity. These findings can be reviewed directly or as part of detailed assessment reports which are available via the Amazon Inspector console or API.See the CloudHunter data sheet to learn more on what capabilities are possible, and how is integrates with AWS inspector.