Transform Cloud Operations with Unified Real-Time CDR and Automated Investigations

Darktrace has announced that its Darktrace / CLOUD platform now unites real-time detection, automated cloud forensics, and investigation within a single workflow, enabling security teams to detect novel threats in real time and respond with forensic depth. The update introduces Automated Cloud Forensic Investigations that instantly capture volatile evidence from cloud assets and preserve it for analysis in minutes rather than days.

Enhanced cloud-native threat detection covers behaviours such as reconnaissance, privilege escalation via role assumption, and malicious compute resource usage, while live topology mapping provides continuous visibility across cloud environments. The solution also features agentless scanning for proactive risk reduction and SaaS log collection to investigate common attack types including business email compromise and account takeover.

It supports automated evidence collection across AWS, Microsoft Azure, GCP, and on‑prem environments, with options for self-hosted or SaaS‑delivered deployment to suit different needs. According to Darktrace Report: Organizations Require a New Approach to Handle Investigations in the Cloud. Written by Adam Stevens, Senior Director of Product, Cloud | Darktrace, this post appeared on 25 September 2025.