Dealing with Storage Data Logs in the Cloud - A Hidden Challenge

Explore the complex challenges of managing and analyzing storage data logs across AWS, Azure, and GCP cloud environments in this 25-minute conference talk. Learn how each cloud provider handles storage access logging differently - from AWS's detailed operational data to Azure's token-dependent logging variations and GCP's identity-focused approach. Discover why these differences significantly impact incident investigation, threat detection, and risk assessment strategies, with Azure emphasizing leaked credential detection while AWS and GCP focus on compromised identity activity. Understand the scale challenges of storage activity logging and how to build efficient detection systems that filter meaningful signals from routine access noise. Gain insights from cloud threat researchers at Wiz who share practical solutions for aggregating logs across multiple cloud providers and developing scalable, signal-driven detection approaches that cut through the overwhelming volume of storage access data to surface critical security events.