VMware
Uncovering the Culprit: Investigating AWS CloudTrail
Uncovering the Culprit: Investigating AWS CloudTrail Logs to Identify Website Hackers
#Uncovering #Culprit #Investigating #AWS #CloudTrail
“Hands-On With Digital Den”
In this demo, I create an AWS CloudTrail trail that audits actions taken in my account. I will then conduct an investigation to determine who hacked the Mom & Pop Café website.
I will configure an AWS CloudTrail trail. Then analyse the CloudTrail logs by using Grep and AWS CloudTrail CLI…
source
To see the full content, share this page by clicking one of the buttons below |
It's a good practice, thanks for sharing! Question is, how did the chaos user actually manage to crate a user for himself as seen in IAM?
Or he was one of the guy from the organization who had been given more privilege than he needs actually? so he could do the chaos