Deployable network sensor for multiple platforms

The method of claim 1, wherein

• the execution of the network sensor package comprises:
• launching an agent on the network sensor host, wherein
• the agent issues alerts about the network sensor host to the remote cybersecurity platform, and the agent executes outside the container.

The method of claim 1, wherein

• the execution of the network sensor package comprises:
• establishing a secure communication connection with the NSD server over the WAN, wherein the configuration information is received over the secure communication connection.

The method of claim 1, wherein

• the container is launched by a bootstrap component in the network sensor package, and
• the bootstrap component comprises a command line interface tool configured to launch processes in the container.

The method of claim 1, wherein

• the bootstrap component is configured to send a bootstrap beacon to the NSD server.

The method of claim 1, wherein

• the network sensor host is a virtual machine instance executing on a virtual machine host.

The method of claim 1, wherein

• the remote cybersecurity platform is configured to use the collected data to determine a security posture of the network and detect one or more security vulnerabilities in the network based on the security posture.

The method of claim 1, wherein

• the collected data includes logs of events on one or more machines in the network, and
• the remote cybersecurity platform is configured to perform search requests on the logs via a log search manager.

The system of claim 11, wherein

• the execution of the network sensor package comprises:
• launching an agent on the network sensor host, wherein the agent issues alerts about the network sensor host to the remote cybersecurity platform, and the agent executes outside the container.

The system of claim 11, wherein

• the execution of the network sensor package comprises:
• establishing a secure communication connection with the NSD server over the WAN, wherein the configuration information is received over the secure communication connection.

The system of claim 11, wherein

• the secure communication connection is established based on a token received from the NSD server.

The system of claim 11, wherein

• the network sensor host is configured to:
• receive, from the NSD server, a configuration update of the network sensor after the deployment of the network sensor, and
• reconfigure the network sensor according to the configuration update.

The system of claim 11, wherein

• the container is launched by a bootstrap component in the network sensor package, and
• the bootstrap component comprises a command line interface tool configured to launch processes in the container.

The system of claim 11, wherein

• the container implements operating system level virtualization.

The system of claim 11, wherein

• the collected data includes logs of events on one or more machines in the network, and
• the remote cybersecurity platform is configured to perform search requests on the logs via a log search manager.

The system of claim 11, wherein

• to send the collected data to the remote cybersecurity platform, the network sensor is configured to:
• batch the collected data into individual payload files, and
• in response to a failed upload of a payload file to the remote cybersecurity platform, resend the failed payload file.