Sponsored: The intrusion signals hiding in plain sight
Summary
Ian, CTO of Permisso, details a three-phase attack lifecycle involving initial access, rapid reconnaissance via SaaS searches, and data exfiltration. He highlights how attackers increasingly use AI to accelerate operations and evade traditional detections. The discussion emphasizes correlating identity signals across IDPs, cloud providers, and data lakes to identify malicious intent. Permisso’s roadmap now includes blocking capabilities and posture management to complement its detection strengths.
Topics discussed
Introduction: Shiny Hunter attacks and AI impact
Three phases of Shiny Hunter attack lifecycle
The challenge of correlating signals across event streams
Prioritizing logging in IDPs, Cloud, and SaaS apps
How AI accelerates attacks and evades detection
Permisso's approach to identity-centric threat detection
Future roadmap: Blocking, posture, and faster attacks
Listen ad-free on Castria