aws

Cloudtrail events in AWS offer a lot of visibility into the calls that roles leverage within the platform. Sometimes tracking the original source of the activity can be challenging. When users and other aws services from one account assume role into another hunting the origin can take a bit of backtracking.

Overview of an anomaly detection platform using cloudtrail logs, athena, lambda, s3, and dynamodb

Cloud Goat codebuild secrets scenario walkthrough

Cloud Goat ec2 ssrf scenario walkthrough

Walkthrough of Elastic Map Reduce compromise, and why it should never be directly exposed to the Internet.