Threat detection🕵️♂️ With Flaws.cloud CloudTrail Logs using ELK StackThis project demonstrates the deployment of the ELK Stack on an AWS EC2 instance and the ingestion of Flaws.cloud CloudTrail logs into the ELK Stack for threat detection. 💡 Side Note: When you click on the link in each step, you will be redirected...Sep 29, 2024 · 2 min readgoodycyb.hashnode.dev
Exploiting Lambda Vulnerabilities for Privilege Escalation in AWSIntroduction In this lab, you start as the 'bilbo' user. You will assume a role with more privileges, discover a lambda function that applies policies to users, and exploit a vulnerability in the function to escalate the privileges of the Bilbo user ...Jul 5, 2024 · 6 min readgoodycyb.hashnode.dev
Threat detection🕵️♂️ in AWS using Amazon Athena ServiceI recommend starting with the article below before beginning the Hands-on lab.😉🕵️♂️ https://medium.com/@goodycyb/threat-detection-in-aws-using-amazon-athena-to-analyze-cloudtrail-logs-from-flaws-cloud-00a43348d18a Objective In this lab, you wil...Feb 4, 2024 · 17 min readgoodycyb.hashnode.dev
Identifying Confidential Data Exposure in Amazon S3 Bucket Using Amazon MacieIntroduction Amazon Macie is an AWS service specializing in data security, particularly for safeguarding sensitive information. It automatically detects such data in S3 buckets, alerting users to potential security risks. Macie is crucial for organiz...Jan 28, 2024 · 9 min readgoodycyb.hashnode.dev
Accessing Secrets from misconfigured S3 Bucket Version controlIn this CTF, you will play the role of a Cloud Security Consultant. Your team's services have been enlisted by Huge Logistics to conduct an external assessment of their cloud environment. Your assignment involves assessing an IP range, which includes...Sep 1, 2023 · 9 min readgoodycyb.hashnode.dev