dfir

Walkthrough of Elastic Map Reduce compromise, and why it should never be directly exposed to the Internet.

IAM roles can have all current credentials revoked. This can be great to stop an attacker, but at what cost?