Watchkeeper Security Monitor

The Watchkeeper Snowflake Security Monitor stands out as a powerful solution for organizations seeking to manage and oversee security across their Snowflake account effectively. With an extensive array of over 25+ unique Key Performance Indicators (KPIs), this tool simplifies security monitoring at the user, role, and network levels. It empowers Compliance Teams, General Admins, and Security Admins by enabling data filtration for different date ranges and presenting insights visually through graphs. Developed as an Adaptable Streamlit-based Native App, it sources its data from Snowflake's Account Usage Schema and harnesses the capabilities of Snowpark. This versatile tool serves multiple purposes, from identifying potential security threats and vulnerabilities to ensuring regulatory compliance and upholding the confidentiality, integrity, and availability of Snowflake Objects.

The Watchkeeper Snowflake Security Monitor presents three distinctive dashboards to provide comprehensive insights:

1. User Security Dashboard: Addresses various security aspects related to Snowflake users, offering key performance indicators (KPIs) like Total Active Users, Ghost Users, Login Error Percentage by Users, Users with the Most Privileges, Inactive Users, Users with the Most Sign Error Count, and more.

2. Role Security Dashboard: Focuses on security aspects related to Snowflake roles, featuring KPIs including Total Active Roles, Ghost Roles, Disconnected Roles, User-to-Role Ratio, Inactive Roles, Least Used Role Grants for Each User, Individuals with Root Privileges, and more.

3. Network Security Dashboard: Delves into security aspects related to network and authentication, offering KPIs such as authentication factors, users altering network policies, users enrolled with Multi-Factor Authentication (MFA), users enrolled with key pair authentication, and more.

搜集汇总

背景与挑战

背景概述

Watchkeeper Security Monitor是基于Snowpark和Streamlit开发的安全监控工具，提供用户、角色和网络三大安全仪表盘，通过25+关键指标帮助管理员识别威胁并确保合规。其数据源自Snowflake的Account Usage Schema，支持按日期筛选和可视化分析。