Vpc-Flow-Logs

EC2 Instance Communicating with Malicious IP — Incident Response

The Problem A running EC2 instance may be compromised — malware installed, data being exfiltrated, or the instance being used as a pivot to …