14m ago · 9 min read · Building a Streaming Compliance Monitoring Pipeline Compliance monitoring traditionally runs as scheduled batch jobs that scan audit logs overnight. A streaming compliance pipeline evaluates regulatory rules continuously as events occur, cutting audi...
Join discussion
16m ago · 8 min read · How to Monitor API Abuse in Real Time APIs are the attack surface of modern applications. Streaming SQL lets you detect API abuse the moment it starts by continuously aggregating request counts, error rates, and data transfer volumes over time window...
Join discussion
20m ago · 9 min read · Real-Time Privilege Escalation Detection with Streaming SQL Privilege escalation sits at the center of virtually every successful breach. An attacker who starts with phished credentials or an insider who begins with read-only access must elevate perm...
Join discussion
22m ago · 12 min read · Command-and-Control Beaconing Detection with SQL C2 beaconing is one of the most consistent behavioral signatures in modern malware. An infected host makes periodic, automated connections to attacker infrastructure at nearly fixed intervals, creating...
Join discussion
25m ago · 9 min read · How to Detect DNS Tunneling with Streaming SQL DNS tunneling hides data inside DNS query names to bypass firewalls and exfiltrate information. RisingWave, a PostgreSQL-compatible streaming database, can analyze a continuous stream of DNS events from ...
Join discussion
29m ago · 9 min read · Transaction Velocity Fraud Detection with SQL Windows Transaction velocity fraud detection works by counting card or account activity within rolling time windows and flagging sudden spikes before they cause financial loss. With RisingWave, you can wr...
Join discussion
31m ago · 10 min read · How to Build a Real-Time SIEM Data Pipeline A real-time SIEM data pipeline ingests security logs from Kafka, normalizes them into a unified schema using materialized views, and applies continuous SQL-based detection rules that fire alerts within seco...
Join discussion
34m ago · 9 min read · Why Your Fraud Detection Doesn't Need Apache Flink Most fraud detection pipelines are built on three primitives: velocity checks over time windows, rule-based scoring joined against reference tables, and threshold alerts. RisingWave implements all th...
Join discussion
38m ago · 5 min read · Streaming SIEM: Process Security Events in Real Time A traditional Security Information and Event Management (SIEM) platform works like a search engine for logs. Events arrive, get indexed, and sit waiting for an analyst to query them. Detection rule...
Join discussion
41m ago · 5 min read · How to Detect Account Takeover in Real Time Account takeover (ATO) is the endpoint of most credential theft campaigns. Attackers buy credential dumps, run automated stuffing against login endpoints, and pivot the successful logins into fraud within m...
Join discussion
