Incident Handling and Response Process for AWS Cloud | INE

Performing incident response in the Cloud is different from a strictly on-premise IR. Learn the ins and outs of the uniqueness of performing an IR in AWS. We will be covering performing IR with native AWS services and technologies such as GuardDuty, Security Hub, Detective, Macie, Inspector, and a selection of open-source tools. We will also cover forensics preservation and cloud evidence management techniques. Learn how to bring your incident response analysis and skills into the Cloud, closer to the breech.

Learn the ins and outs of the uniqueness of performing incident response in the AWS environment. We will be covering performing IR with native AWS services and technologies such as GuardDuty, Security Hub, Detective, Macie, Inspector, and a selection of open-source tools. We will also cover forensics preservation and cloud evidence management techniques.

LEARNING OBJECTIVES
At the end of this Bootcamp, students will be able to:

Demonstrate knowledge of AWS evidence sources.
Preserve evidence in the AWS environment.
Use Amazon AWS tools to detect threat actor TTPs.
Perform analysis of AWS network logs using 3rd party tools.
Demonstrate techniques to locate threat actors in an AWS environment.




If any links die or problem unrar, send request to