Exabeam brings New-Scale Analytics to Google Security Operations, extending Google Security Operations with Behavior Intelligence for faster insider threat detection, investigation, and response (TDIR). Built on Google Cloud for cloud-scale security analytics, Exabeam connects directly with Google Security Operations data, so teams work from one integrated view.
As a Google Unified Security Recommended designated partner, Exabeam extends behavioral analytics and agent-powered workflow automation to Google Security Operations. Security teams gain deeper visibility into insider threats and risky activity across human and AI identities, helping them prioritize investigations, reduce complexity, and accelerate TDIR workflows.
Google Cloudで何をするか
Exabeam applies New-Scale Analytics directly to Google Security Operations data, giving security teams behavioral context for users, entities, service accounts, and AI agents. This integrated approach identifies insider threats earlier, prioritizes risky activity, and reduces the operational overhead of maintaining a separate analytics system.
New-Scale Analytics uses behavioral analytics, AI-driven operations, automated workflows, and outcomes-based visibility to analyze activity before threats escalate.
Google Security Operations and New-Scale Analytics
Google Security Operations provides a cloud-scale foundation to centralize and correlate security telemetry. New-Scale Analytics extends this foundation with behavioral analytics that learns normal activity for users, entities, devices, service accounts, and AI agents.
Through integrated data sharing, security teams can apply Exabeam Behavior Intelligence to data already in Google Security Operations. This sharpens detection of high-risk activity sooner, reduce false positives, and prioritize investigations across human and non-human identities.
統合のメリット
- Detect insider risk across human and AI identities
- Prioritize risky activity with behavioral context and dynamic risk scoring
- Accelerate TDIR workflows with agent-powered automation and investigation context
- Reduce complexity by applying Behavior Intelligence to data already in Google Security Operations
- Procure through Google Cloud Marketplace and apply eligible purchases toward existing Google Cloud spend commitments
Securing AI Agents With Gemini Enterprise Agent Platform and Model Armor
AI agents increasingly act across applications, tools, data sources, and workflows with a level of autonomy that can resemble a privileged insider. As agents move from task execution to delegated business outcomes, security teams need visibility into agent behavior, orchestration, tool use, and governance signals, not just traditional user activity.
Exabeam integrates with Gemini Enterprise and Model Armor to give security teams the same level of oversight to human and non-human identities:
- Gemini Enterprise Agent Platform provides a unified foundation to build, scale, govern, orchestrate, secure, and optimize enterprise AI agents, including agent development, integration, runtime, DevOps, and governance capabilities.
- Model Armor captures detailed activity data for large language model (LLM) prompts and responses.
Because the platform is designed to deliver agents through the Gemini Enterprise app while remaining integrated with IT operations, it creates a new set of behavioral signals security teams can analyze to understand how agents act, what systems they access, and where risk may emerge.
Exabeam analyzes this activity in New-Scale Fusion alongside user behavior. New-Scale Analytics baselines both human and agent activity, applies dynamic risk scoring, and surfaces high-risk behavior for investigation.
Exabeam Nova cybersecurity agents operationalize this intelligence with agent-powered TDIR workflows, helping analysts interpret behavioral context, prioritize response, and reduce insider risk from human and AI identities.
統合
Googleワークスペース
| エンドポイント | 監査ソースAPI | 含まれるイベント | 追加ソースAPI |
|---|---|---|---|
| ログイン | レポートAPI | ログイン監査活動 | スタックドライバー/アドミン活動 |
| 管理者 | 管理者活動 | ||
| ドライブ | 監査活動の推進 | ||
| トークン | トークン活動 | ||
| モバイル | モバイル監査活動 | ||
| カレンダー | カレンダー監査活動 | ||
| グループ | グループ監査活動 | ||
| ジーピープラス | Google+の監査活動 | ||
| ルール | ルール監査活動 | ||
| サムル | SAML 監査アクティビティ | ||
| Gmailログ | BigQueryのGmailログ | メッセージ・トレース |
グーグル・クラウド・プラットフォーム
| サービスまたはモジュール | イベントを含む |
|---|---|
| アプリエンジン | App Engine PaaSサービスの管理者アクティビティに関連するイベント |
| ビッグクエリ | BigQueryサービスの管理アクティビティに関連するイベント |
| クラウドデータフロー | クラウドデータフローサービスの管理アクティビティに関連するイベント |
| クラウド・データプロック | Cloud Dataprocサービスの管理者アクティビティに関連するイベント |
| クラウドDNS | クラウドDNSサービスの管理者活動に関連するイベント |
| クラウド・アイデンティティおよびアクセス管理(IAM) | クラウドIAMサービスの管理者アクティビティに関連するイベント |
| クラウド鍵管理システム(KMS) | クラウドKMSサービスの管理者活動に関連するイベント |
| クラウド・リソース・マネージャー | Cloud Resource Managerサービスの管理アクティビティに関するイベント |
| クラウドSQL | クラウドSQLサービスの管理アクティビティに関連するイベント |
| クラウドストレージ | クラウド・ストレージ・サービスの管理アクティビティに関連するイベント |
| グーグルコンピュートエンジン(GCE) | GCEサービスの管理活動に関連するイベント |
| コンピュートエンジンのシリアルポートアクセス | Compute Engine Serial Port Accessサービスの管理アクティビティに関するイベント |
| グーグルサービスマネジメント | Google Service Managementサービスの管理アクティビティに関するイベント |
| Google Gemini Enterprise Agent Platform | Events related to agent development, deployment, orchestration, runtime activity, integrations, governance, and security controls |
| グーグルモデル・アーマー | LLMの活動、プロンプト、回答に関するイベント |
顧客のメリット
- Accelerate TDIR workflows: Exabeam validation testing found that organizations accelerated TDIR workflows by up to 80%.
- Detect insider risk earlier: Apply New-Scale Analytics to Google Security Operations data to identify high-risk activity across users, entities, service accounts, and AI agents.
- Reduce analytics complexity: Use integrated data sharing to apply Behavior Intelligence to data already in Google Security Operations without maintaining a separate analytics environment.
- Available on Google Cloud Marketplace: Procure Exabeam New-Scale Analytics through Google Cloud Marketplace, where eligible purchases can apply toward existing Google Cloud spend commitments.
- Secure both users and agents: Extend coverage to AI agents by analyzing Gemini Enterprise Agent Platform and Model Armor activity alongside user behavior, behavioral analytics, dynamic risk scoring, and agent-powered TDIR workflows to detect risky human and non-human identity activity.
グーグル・クラウドについて
Google Cloud offers a powerful, optimized AI stack, including AI infrastructure, leading models like Gemini, data management capabilities, multicloud security solutions, developer tools and platform, as well as agents and applications, that enables organizations to transform their business for the Agentic Era. Customers in more than 200 countries and territories turn to Google Cloud as their trusted technology partner.technology — all on the cleanest cloud in the industry. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.
連絡先
関連リソース
Press Release: Exabeam Collaborates with Google Cloud to Give Security Teams Deeper Insider Threat Visibility in Google Security Operations
Blog: Securing the Future of Work: Agent Behavior Analytics with Google Cloud
Blog: Seeing the Invisible: Visualizing and Protecting AI-Agent Activity with Exabeam & Google
Brief: Extend Google Security Operations With Behavioral Analytics
Exabeamについてもっと知る
ホワイトペーパー、ポッドキャスト、ウェビナーなどのリソースで、Exabeamについて学び、情報セキュリティに関する知識を深めてください。
Exabeamのデモを見る
デモをリクエストして、Exabeamがセキュリティ・オペレーション・チームのエージェント型エンタープライズ・セキュリティ確保にどのように役立つかをご覧ください。
以下の事を学びます:
- 人間とエージェントの行動を監視・分析し、リスクを洗い出す
- 機械が構築したタイムラインで脅威を調査
- マルチエージェントAIを使用して、検知、調査、対応ワークフローを改善する。
- プレイブックを適用して意思決定を導く
- コンプライアンス要件のサポート
受賞歴のあるセキュリティのリーダー