IR Prep and Detection Engineering When the Cloud is Your Data Center
17Public clouds have changed how organizations build their data centers, moving from on-prem to the browser and API calls over the commodity Internet. Attackers are determined to find your weaknesses and mistakes. This presentation will go over major attacks, highlight lessons learned, and provide you with a road map for evaluating your public cloud usage to improve your operational posture to minimize exposure and your threat profile. Topics: MITRE ATT&CK Cloud Matrix, Top Cloud Attack Kill Chains and disruption, Common attacker activity, and log configuration within Azure and AWS to detect these patterns.
ABOUT THE SPEAKER
Don Murdoch, GSE, MSISE, MBA is a seasoned IT leader with over 20 years of IT and InfoSec experience across several disciplines. Most recently, Don is the Director of a MSSP and Security Operations Practice for SLAIT Consulting, where he works with businesses of all sizes to implement SIEM, improve Security Operations, and provide security architecture consulting with an emphasis on risk reduction and mitigation.
View upcoming Summits: http://www.sans.org/u/DuS
Download the presentation slides (SANS account required) at https://www.sans.org/u/1iaE
#BlueTeamSummit #BlueTeam #CyberDefense