Workspace cyber protection platform and methods thereof
AssigneeCyvore Security, LTD
InventorsYoav Rotem, Ori Segal, Yiftach Rotem
Life of this patent
Estimating the term…
Abstract
A system and method for detecting a cybersecurity attack in a workspace platform is presented. The method includes ingesting workspace data from a cloud-based workspace provider; selecting a first-tier investigation script from a plurality of investigation scripts, the plurality of investigation scripts including the first-tier investigation script and a second-tier investigation script; executing the first-tier investigation script on the ingested workspace data; detecting a potential cybersecurity attack based on a result of executing the first-tier investigation script; and executing the second-tier investigation script in response to detecting the potential cybersecurity attack.
Claims19
A method for detecting a cybersecurity attack in a workspace platform, comprising:
- ingesting workspace data from a cloud-based workspace provider;
- selecting a first-tier investigation script from a plurality of investigation scripts, the plurality of investigation scripts including the first-tier investigation script and a second-tier investigation script;
- executing the first-tier investigation script on the ingested workspace data;
- detecting a potential cybersecurity attack based on a result of executing the first-tier investigation script;
- and
- executing the second-tier investigation script in response to detecting the potential cybersecurity attack.
A non-transitory computer-readable medium storing a set of instructions for detecting a cybersecurity attack in a workspace platform, the set of instructions comprising:
- one or more instructions that, when executed by one or more processing circuitry of a device, cause the device to:
- ingest workspace data from a cloud-based workspace provider;
- select a first-tier investigation script from a plurality of investigation scripts, the plurality of investigation scripts including the first-tier investigation script and a second-tier investigation script;
- execute the first-tier investigation script on the ingested workspace data;
- detect a potential cybersecurity attack based on a result of executing the first-tier investigation script;
- and
- execute the second-tier investigation script in response to detecting the potential cybersecurity attack.
A system for detecting a cybersecurity attack in a workspace platform comprising:
- a processing circuitry;
- a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
- ingest workspace data from a cloud-based workspace provider;
- select a first-tier investigation script from a plurality of investigation scripts, the plurality of investigation scripts including the first-tier investigation script and a second-tier investigation script;
- execute the first-tier investigation script on the ingested workspace data;
- detect a potential cybersecurity attack based on a result of executing the first-tier investigation script;
- and
- execute the second-tier investigation script in response to detecting the potential cybersecurity attack.
Dependencies are inferred from the claim text.