Patent ID: 11916926
Assignee: WIZ, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 11:
12. A non-transitory computer-readable medium storing a set of instructions for detecting potential lateral movement in a cloud computing environment, the set of instructions comprising:
one or more instructions that, when executed by one or more processors of a device, cause the device to:
detect a private encryption key including a first hash value of a public key;
detect a certificate including a second hash value of another public key, the detected certificate associated with a workload in the cloud computing environment;
generate in a security database: a representation of the private encryption key, a representation of the certificate, and a representation of the workload, wherein the representation of the workload is associated to the representation of the certificate;
associate the representation of the private key and the representation of the certificate, in response to determining a match between the first hash value and the second hash value;

determine that the workload is potentially compromised, in response to receiving an indication that an element of the public key is compromised;
generate a lateral movement simulation in response to indicating that the workload is simulated as compromised; and, tag the workload with a compromised simulation indicator.