Databricks explains how to detect credential-driven attacks on its platform
AIDatabricks explains how a credential-driven attack unfolds on its platform, after an attacker gains access with a stolen session cookie, personal access token, or service-principal credential. The post describes using verbose audit logs and Genie to detect shifts in an identity's behavior, how to respond after confirming a compromise, and which controls limit what a stolen credential can do.
Source details
Databricks Blog · databricks.comPublished · added here
Original title: Detecting credential-driven attacks on Databricks