What is CIRA? Cyber Terms Explained

Featuring: Tal Mozes, CEO & Co-Founder, Mitiga

CIRA refers to cloud investigation and response automation, which is a way to describe that there's a lot of challenges in the cloud versus on-prem environments.

These require new technologies to go and sift through large amounts of data from different languages almost, I would say, because every cloud or SaaS environment will generate different types of logs, and they will all be reading differently in different languages.

CIRA is, first of all, a collection of all those different logs for security reasons, and then digesting them, normalizing them into a place that you can query them very easily and analyze them. And that way, you can use those different analyses for different reasons. You can do active analysis for detection, or you can do proactive analysis for the sake of hunting, and you can also do reactive analysis for the sake of incident response.  

CIRA is the technology that allows all of that to be effective, automated, and scalable on the large amount of data that fits in today’s era of cloud.

Explore Mitiga’s platform, featuring state-of-the-art CIRA capabilities.

Video

What Is Cloud Investigation? Cyber Terms Explained

Maybe before we dive deep into cloud investigation, let's talk about what is the cloud that we're referring to in cybersecurity? Because the cloud has different parts in your organization.

Video

What is Cloud Incident Response? Cyber Terms Explained

Cloud incident response, process-wise, is not very different than a regular incident response—which is the process once we realize we have been breached. We need to start investigating what has happened, what is the impact, when did it happen, and what we need to return to business as usual as soon as possible.

Video

What is a Security Data Lake? Cyber Terms Explained

When we talk about a Security Data Lake, Data Lake is not a very new concept. It's the concept of aggregating alot of data from different resources into a centralized repository.