Admin Isolation on Shared Clusters
This blog was co-authored by David Meyer, SVP Product Management at Databricks and Joosua Santasalo, a security researcher with Secureworks. At Databricks, we...
Using Enhanced Security Monitoring to Detect & Alert for Suspicious Activity on Your Databricks Clusters
Databricks on AWS relies on custom machine images, AMIs, deployed as EC2 instances in the customer’s account. These EC2 instances provide the elastic...
Cybersecurity in the Era of Multiple Clouds and Regions
In 2021, more than three quarters of all enterprises have infrastructure in multiple clouds . This trend shows no signs of slowdown with...
Restricting Libraries in JVM Compute Platforms
Security challenges with Scala and Java libraries Open source communities have built incredibly useful libraries. They simplify many common development scenarios. Through our...
Near Real-Time Anomaly Detection with Delta Live Tables and Databricks Machine Learning
Why is Anomaly Detection Important? Whether in retail, finance, cyber security, or any other industry, spotting anomalous behavior as soon as it happens...
Automating ML, Scoring, and Alerting for Detecting Criminals and Nation States Through DNS Analytics
This blog is part two of our DNS Analytics blog, where you learned how to detect a remote access trojan using passive DNS...
Security Best Practices for Delta Sharing
Update: Delta Sharing is now generally available on AWS and Azure. The data lakehouse has enabled us to consolidate our data management architectures...
Building a Cybersecurity Lakehouse for CrowdStrike Falcon Events Part II
Visibility is critical when it comes to cyber defense – you can't defend what you can't see. In the context of a modern...
Scanning for Arbitrary Code in Databricks Workspace With Improved Search and Audit Logs
How can we tell whether our users are using a compromised library? How do we know whether our users are using that API...
Hunting for IOCs Without Knowing Table Names or Field Labels
There is a breach! You are an infosec incident responder and you get called in to investigate. You show up and start asking...