Garda NDR and K2 Cloud have confirmed the compatibility of their network threat detection and response system with the cloud platform's traffic mirroring service. This integration allows companies to maintain control over network flows during cloud migration, identifying complex attacks, including those hidden in encrypted traffic, and facilitating rapid incident investigation.
The integration enables visibility into network interactions, including traffic between virtual machines and external connections. The system utilizes behavioral analysis and machine learning algorithms to detect anomalies in host behavior, C&C communications, brute-force attacks, and Kerberoasting, identifying both known and unknown threats.
Joint testing by K2 Cloud and Garda specialists confirmed the full cycle of traffic processing, from capture via the mirroring service to deep analysis and response. The tests verified the correct operation of packet analysis, data filtering, threat detection mechanisms, and incident investigation, as well as integrations with SIEM systems, multi-tenancy, and role-based access models.
The solution supports various configurations from 1 to 10 Gbps. Companies migrating to the cloud can apply the same security policies and processes as in their local networks, using flexible filters to send only relevant traffic for analysis to avoid overloading sensors with service data.
