Join this session to learn about an investigation methodology for AWS control plane security incidents and a demonstration on a GuardDuty alert, while diving deep into technical aspects of CloudTrail logging. Attendees will also be able to see how these technical details can enable accurate and speedy threat investigations.


RSA® Conference, the world’s leading information security conferences and expositions, today concluded its 31st annual event at the Moscone Center in San Francisco. The year’s event attracted over 26,000 attendees, including 600+ speakers, 400+ exhibitors, and over 400 members of the media. Throughout the week, attendees networked on the expo floor and participated in keynote presentations, track sessions, tutorials, seminars, and special events.

Several of the most pressing topics discussed during this year’s Conference included issues surrounding privacy and surveillance, the positive and negative impacts of machine learning and artificial intelligence, the nuances of risk and policy, and cybersecurity-focused innovations across crypto and blockchain.

CloudTrail Logging Internals: Investigating AWS Security Incidents

Conference: RSA Conference 2022

Abstract

Post a comment

Related work

Inside the Apple T2

Exploiting a Slightly Peculiar Volume Configuration with SIG-Honk

The Cyber Shell Game – War, Information Warfare, and the Darkening Web

Permission Mining in GCP

Secure the Supply Chain: Hands-on Incident Response Workshop