CLOUD MISCONFIGURATIONS

A leading APAC investment organization that operates a large footprint on AWS chose eSentire MDR and Managed Vulnerability Services so they could grow their AWS footprint securely. They were looking for an MDR provider who could deliver visibility into resources across their multiple AWS accounts and on-premises network infrastructure.

They also needed proactive threat hunting with multi-signal MDR services that could investigate and correlate threats across network, endpoint and vulnerability data sources. Ultimately, they chose eSentire and are confident that any new resources they deploy are automatically discovered and protected with our end-to-end MDR coverage.

Results and Benefits:

Having infrastructure spread across 12 AWS accounts, in addition to on-premises components, eSentire’s MDR service provides a consolidated view of cyber threats across networks and SOC Cyber Analysts are able to investigate detected threats, providing detection in seconds and containment in minutes 24/7. Upon initial deployment, eSentire’s Elite Threat Hunters discovered approximately 11,000 alert conditions within the AWS environment.

Working with the customer, services were tuned to filter false positives and critical misconfigurations were remediated. The customer now averages 30 misconfiguration alerts a month, which eSentire remediates on their behalf in most cases. Our customer can now grow their AWS footprint with confidence that any new resources are automatically discovered and included in eSentire’s MDR service visibility.