LinkedIn
Twitter
What’s New in Security Command Center?
This Seurity Command Center product release digest is designed to keep you informed about the latest advancements in SCC Enterprise and SCC Premium. Discover the latest cloud security capabilities that we made available in Q3 2024.
__________________________________________________________________________________
Get expanded CIEM support for additional clouds and identity providers
(Generally Available)
Security Command Center now supports AWS IAM identities for AWS, and Entra ID (Azure AD) and Okta identities on Google Cloud. With multicloud, multi-identity CIEM support, it’s easier to discover which identities have access to which cloud resources across more of your cloud footprint. All new capabilities are available in SCC Enterprise.
Read our blog >>
Use toxic combinations pinpoint your greatest cloud risks
(Public Preview)
Security Command Center’s virtual red team capability now discovers toxic combinations, which are groups of security issues that can create a path for an attacker to reach high-value cloud resources. Unlike competing approaches, SCC simulates millions of attack permutations to find cloud risks, and computes an attack exposure score to prioritize security response. Available in SCC Enterprise and SCC Premium (for Google Cloud only).
Read the SCC community post >>
Read our virtual red team blog >>
Configure custom security posture policies
(Generally Available)
SCC customers can now configure custom posture policies in Google Cloud to manage their security guardrails and to detect drift from a benchmark. Policies can include both detective and preventive controls, helping reduce cloud risks and prevent attacks. Available in SCC Enterprise and SCC Premium.
Use Sensitive Data Protection to set resource values for SCC virtual red team
(Generally Available)
SCC virtual red team integrates with Google Cloud’s Sensitive Data Protection service. SCC customers can now automatically set the resource value of an Amazon S3 bucket, or a Cloud Storage resource in Google Cloud, based on the sensitivity of the data. This improves the accuracy and usefulness of virtual red team results, including attack paths and attack path exposure scoring for toxic combinations. Available in SCC Enterprise and SCC Premium (for Google Cloud only)
Mute future security findings with dynamic mute rules
(Generally Available)
Security Command Center now supports dynamic mute rules, which allow muting of future and existing findings temporarily until a specified date, or indefinitely until a finding no longer matches the configuration. These rules are an alternative to static mute rules that only mute future findings indefinitely. Available in SCC Enterprise and SCC Premium (for Google Cloud only)
