We put Stream’s detection and investigation capabilities to the test using a scenario modeled after the recent Shai-Hulud 2.0 supply-chain attack. 🪱

Our Security Research Team detonated an infected npm package inside a K8s pod to see how Stream handles fast, multi-stage behavior end to end.

Here's what we learned: 1) Stream's CDR built-in anomaly detection engine perfectly caught this unknown threat 🤑 2) How Stream correlates credential harvesting, exfil attempts, fileless techniques, and cross-service behaviors in real time. 💥

Stream's users don't have to wait for signature database updates to detect zero-day attacks. Do you?