Your question is Automate Threat Detection in Cloud. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
How would you automate threat detection in a cloud environment?
Describe a practical, production-ready pipeline for collecting cloud audit logs, network telemetry, identity events, and managed detection findings. Explain how you would normalize and validate events, apply detection rules, enrich alerts, route incidents to responders, preserve evidence, and monitor pipeline health. Address duplicate events, late-arriving data, schema evolution, replay, least-privilege access, and safe failure recovery.
