EC2 Instance Communicating with Malicious IP — Incident Response
The Problem A running EC2 instance may be compromised — malware installed, data being exfiltrated, or the instance being used as a pivot to …
Jan 20, 2025
Read more
Guardduty
2 articles
Developer Pushed AWS Credentials to Public GitHub — Incident Response
The Problem Leaked AWS credentials are one of the most dangerous security incidents. Attackers have automated scrapers that monitor GitHub …
Jan 20, 2025
Read more