About Resources
View the resources that Cloud Guard monitors, and manage and investigate vulnerabilities for each resource.
list of Cloud Guard resources and be able to sort/filter them based on different dynamic parameters
Security analysts in a security operations center (SOC) use Cloud Guard to create rules and generate problems across different log sources. The Cloud Guard Resources page provides additional context for resources of interest.
Service owners can use the Cloud Guard Resources page to better track and manage risks in their cloud environment over time, and compare progress across projects and teams.
The Resources Page
The Cloud Guard Resources page is where you can see contextual information about the instances that Cloud Guard is monitoring, making it quick and simple to respond to alerts. It lists all the resources that Cloud Guard is monitoring. You can filter by several parameters to focus on the information you're interested in. For example:
- Filter for instances, which have a specific risk level.
- Filter by problem name.
- Filter by target.
- Filter detector type, Activity, Configuration, Insight, Instance Security, Threat.
- Filter for instances by region.
The Resources Details Page
The Resources details page lets you examine a specific resource and see the information associated with it:
- Cloud Guard problems associated with the resource.
- Current critical (and high) CVE findings.
- Current open ports and processes.
- Past query results associated with the resource.
- Any malware or malicious process running on the host.
You can get to the Resources details page for a resource from the:
- Resources page, where you can filter to find the resource you're interested in.
- Problem summary page, where you can filter to find the type of problem and the resources affected by them, and select the resource name.
- Cloud Guard Overview page, where you can use the Problems tile to group problems by category, and get a list of problems and the resources affected them, by selecting the appropriate bar, then selecting the resource name.