Vectra AI enhances platform with 40 new Azure detections

Vectra AI has unveiled an extension to its platform, enhancing security capabilities for Microsoft Azure services with over 40 new behaviour detections specifically designed for the cloud environment.

These advancements come at a time when Microsoft environments are facing significant threats. According to the Microsoft Digital Defense Report 2024, Microsoft customers endure over 600 million daily attacks from cybercriminals and nation-state adversaries. This situation is exacerbated by the hybrid and multi-cloud setups adopted by many organisations, which have expanded the attack surface.

Hitesh Sheth, CEO and Founder of Vectra AI, emphasised the growing need for sophisticated threat detection.

"We consistently hear from CISOs that they want AI to help them identify real threats, connect the dots in real-time, and deliver accurate, integrated attack signal to the SOC. This is especially true for CISOs securing rapidly sprawling Microsoft environments. No one is better than Vectra AI at delivering integrated attack signal in real-time," Sheth said.

The expanded Vectra AI platform now delivers over 100 AI-driven attacker behaviour detections. This comprehensive coverage targets vulnerabilities in Microsoft Active Directory, Microsoft Entra ID, Microsoft M365, Microsoft Copilot for M365, and now Microsoft Azure, providing significant support to security operations centers (SOC).

A recent report from Vectra Managed Detection and Response services indicated a sixfold increase in attacks on Microsoft E5 customers between June and October 2024, underlining the pressing demand for robust cybersecurity solutions.

Vectra AI's platform aims to mitigate these threats by offering extensive detection capabilities and aiding SOC teams in managing and understanding the threat landscape.

Jeff Reed, Chief Product Officer of Vectra AI, highlighted the importance of the expanded capabilities: "By expanding our coverage of the Microsoft ecosystem with AI detections for Azure and Copilot, we are demonstrating to SOC teams that our Attack Signal Intelligence is AI they can trust, providing a unique blend of advanced technology, contextual understanding, and automation that other threat detection tools cannot compete against."

The platform utilises Vectra AI's patented Attack Signal Intelligence, designed to continuously learn from the environment and provide insights into complex attacker behaviours. This helps in connecting the dots across the organisational network and cloud infrastructures, thereby improving defence mechanisms against hybrid and multi-cloud attacks.

Fabian Heiz, CISO of Coop, commented on the collaboration with Vectra AI, stating: "Vectra AI covers not only the basics, but with the detection models, it really looks at the identities traversing through Microsoft Azure and Office 365, and that gives us a complete picture. Vectra AI has been a good partner for the last eight years."

The recent enhancements position Vectra AI's platform as a comprehensive tool in the fight against increasing cyber threats faced by companies using Microsoft's diverse suite of services.