Identifying unmanaged cloud resources with endpoint and network logs

An apparatus comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform actions comprising:
• collecting, by an electronic device, first data with respect to traffic in a computer network;
• based at least in part on the first data, extracting, by the electronic device, relationships related to the traffic;
• applying rules to the relationships to extract destinations in the computer network that provide enterprise-owned resources in a cloud environment, wherein the resources are cloud resources comprising at least one of computing instances or storage buckets located within the cloud environment and are owned by an enterprise;
• and
• identifying, by the electronic device, (i) one or more users that are associated with the enterprise and accessing the enterprise-owned resources or (ii) one or more business entities that are associated with the enterprise and accessing the enterprise-owned resources.

One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by one or more processors, cause the one or more processors to perform actions comprising:

• collecting, by an electronic device, first data with respect to traffic in a computer network;
• based at least in part on the first data, extracting, by the electronic device, relationships related to the traffic;
• applying rules to the relationships to extract destinations in the computer network that provide enterprise-owned resources in a cloud environment, wherein the resources are cloud resources comprising at least one of computing instances or storage buckets located within the cloud environment and are owned by an enterprise;
• and
• identifying, by the electronic device, (i) one or more users that are associated with the enterprise and accessing the enterprise-owned resources or (ii) one or more business entities that are associated with the enterprise and accessing the enterprise-owned resources.