A dashboard interface displaying network traffic data. It features charts and graphs for traffic by port, protocol, resource, process, and type. The background has a gradient from blue to purple to pink. Tables and visualizations summarize the data.

Know Who Your Resources Talk To With Upwind’s Destination Domain Capabilities

Denise Ashur November 03, 2023

Know Who Your Resources Talk To With Upwind’s Destination Domain Capabilities

Introducing Upwind’s new capability – Destination Domain Identification!

Starting now, you can view resource communication with DNS destinations such as egress domains traffic or even internal DNS destinations such as databases and internal domains. This helps you to understand and secure your runtime environment even further. 

Upwind uses this data for its threat detection engine and will notify you when your resources are trying to communicate with low reputation domains or whenever resources are contacting addresses for the first time in a way that requires your attention.

Contents

Further Reading

org chart - dark mode

The Org Chart is The Wrong Security Boundary

The department model of dividing companies into groups earned its place. Finance gets the finance applications, engineering gets the repositories, HR gets the HRIS, and the boundaries hold because software was bought per function and used per function. Identity and access management platforms, such as Active Directory and Okta, were built around exactly that. Groups…
behind-the-curtain-part-03

What’s Behind the Curtain? AWS Bedrock AgentCore Runtime Tear Down – Part III

Recap In Part I and Part II, we: Networking and VPC Mode Network Isolation Testing The microVM is assigned an IPv6 address matching the value in the JWT. Across multiple runs, all addresses shared the same 2600:1f18::/32 prefix, but cross-microVM communication always failed. We attempted to reach the host EC2 IMDS by manipulating the route…
behind-the-curtain-part-02

What’s Behind the Curtain? AWS Bedrock AgentCore Runtime Tear Down – Part II

Recap In Part I, we explored the AgentCore Runtime microVM from the inside and discovered we weren't alone - four platform binaries were running alongside our code, and one of them was quietly shipping logs to an AWS-internal S3 bucket. We left off with a question: what can we learn from these internal components, and…
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS