r/Information_Security
how are you catching stolen cloud service account creds? wiz /orca?
- upvotes
- 2
- comments
- 2
Post
Highlighted: the lines this signal was extracted from
I saw the PingCAP breach involving stolen service account creds. kinda scary how much access one account can have. been looking at Orca and Wiz for cloud identity risks. anyone using either to catch risky access paths before things go sideways?
Also quoted as evidence
[comment u/TeamAutomatic2733] haven't tried wiz yet but from what i read it catches more misconfig stuff than identity paths