CDR (cloud detection and response)
Cloud detection and response (CDR) is the continuous monitoring of activity logs, identities and workloads on platforms such as Amazon Web Services, Azure or Google Cloud to detect attacks in progress and respond to them. Unlike posture and workload protection tools such as CNAPP and CWPP, which focus on misconfigurations and hardening, CDR addresses active threats, such as anomalous use of access keys.
How TecnetOne handles it: TecnetSOC
CDR, cloud threat detection, cloud incident response, cloud security monitoring, CDR vs CNAPP
Related terms
Microsoft 365 tenant
A Microsoft 365 tenant is the dedicated instance Microsoft creates for an organization when it subscribes to the service: it holds the organization's users, licenses, domains, data and security settings, and it is managed through Microsoft Entra ID. Every tenant has an initial domain ending in onmicrosoft.com. In mergers or divestitures, mailboxes and files are migrated from one tenant to another.
SSE (Security Service Edge)
Security Service Edge (SSE) is a set of cloud-delivered security services that protects user access to the internet, SaaS (software as a service) applications and private applications. It typically combines a secure web gateway (SWG), a cloud access security broker (CASB) and zero trust network access (ZTNA). It is the security component of SASE, without the networking layer.
Cloud landing zone
A cloud landing zone is the baseline public cloud environment configured before workloads are migrated. It defines the account or subscription structure, networking, identity, security policies and activity logging. Microsoft describes it in its Cloud Adoption Framework for Azure, and in AWS it can be built with AWS Control Tower. It keeps each project from configuring the cloud on its own.
Site-to-site VPN (IPsec)
A site-to-site VPN is a permanent encrypted connection between two networks, such as headquarters and a branch office, that runs over the internet as if it were a private link. It is usually established by the firewalls or routers at each location using IPsec (Internet Protocol Security); unlike a remote access VPN, it connects entire networks rather than individual people.
Well-Architected Framework
The Well-Architected Framework is a set of principles and best practices that AWS (Amazon Web Services) and Microsoft Azure publish for designing and reviewing workloads on their clouds. The AWS version is organized into six pillars: operational excellence, security, reliability, performance efficiency, cost optimization and sustainability. A review flags risks before they cause outages or cost overruns.
Ready to put this into practice in your operation?
Tell us what you need and a TecnetOne engineer will get back to you.
Talk to an engineerTalk to an engineer
Tell us what you need and we’ll reply the same business day.