Patent ID: 11916926
Assignee: WIZ, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method for detecting potential lateral movement in a cloud computing environment, comprising:
detecting a private encryption key including a first hash value of a public key;
detecting a certificate including a second hash value of another public key, the detected certificate associated with a workload in the cloud computing environment;
generating in a security database: a representation of the private encryption key, a representation of the certificate, and a representation of the workload, wherein the representation of the workload is associated to the representation of the certificate;
associating the representation of the private key and the representation of the certificate, in response to determining a match between the first hash value and the second hash value;
determining that the workload is potentially compromised, in response to receiving an indication that an element of the public key is compromised;
generating a lateral movement simulation in response to indicating that the workload is simulated as compromised; and
tagging the workload with a compromised simulation indicator.