Attackers are increasingly automating reconnaissance and lateral movement, compressing attack timelines significantly, with some breaches progressing from initial access to data exfiltration within minutes.

CrowdStrike said its expanded CDR capability is designed to address this challenge by analysing cloud activity as it happens, rather than relying on delayed log processing.

“Every second counts when adversaries can move from access to exfiltration in minutes,” Daniel Bernard, chief business officer at CrowdStrike, said in a statement.

“Extending CrowdStrike CDR to one of the world’s largest cloud platforms gives more organisations the speed and precision to stop cloud attacks the moment they begin.”

The expansion also introduces greater flexibility for global organisations navigating data residency and compliance requirements.

“Google Cloud is committed to an open security ecosystem, enabling greater choice and flexibility for our customers,” Vineet Bhan, director of security and identity partnerships at Google Cloud, said.

Stakeholders say the integration addresses a growing need for security models that can operate at scale without compromising governance. Alexander Pabst, deputy CISO at Allianz Group, said combining real-time detection with global infrastructure is critical to keeping pace with modern threats.

“Cloud attacks are evolving rapidly, and stopping them requires real-time visibility and the ability to act instantly,” Pabst said.