Unleashing improved context for threat actor activity with our Cloudforce One threat events platform

What this post added

Introduced the Cloudforce One threat events platform, a new capability that provides contextual data about observed and mitigated threats. This platform leverages Cloudflare's network traffic insights to offer a real-time view of threat activity. It is built using Cloudflare Workers and SQLite-backed Durable Objects for scalable storage and event management. The platform maps events to the MITRE ATT&CK framework and Cyber Kill Chain stages, and includes DoS attacks and advanced threat operations. It aims to empower security practitioners with actionable insights and is accessible via the Cloudflare Dashboard and a dedicated API.