Cloud IR Resources - Sky-hi IR: IR at cloud scale

Talk slides here:

Recording here: https://www.youtube.com/watch?v=Q8hfcBJVKq8&t=15s

Big "Thanks!" to BsidesRDU.org and Adrian Crenshaw (@irongeek_adc)

Data costs:

https://azure.microsoft.com/en-us/pricing/details/bandwidth/
https://aws.amazon.com/blogs/aws/estimate-your-c/

Tools:

SIFT Workstation
Getting Data from S3 via Python
AWS Montoring and Alerting 3-rd party tools:

• Cloud-Custodian
• Cloud-Inquisitor
• CloudTracker
• Security Money
• StreamAlert
• Wazuh

Related Talks:

Logging, Monitoring, and Alerting in AWS (The TL;DR) - SANS DFIR Summit 2018 - Jonathan Poling (@JPoForenso)

Automating Incident Response and Forensics in AWS - Ben Potter - AWS Security Lead


How-Tos:
How to copy a VMDK to image

SIFT Workstation How-Tos

Whitepapers

Incident Handler's Handbook by Patrick Kral - February 21, 2012

How to Get into Infosec: InfoSec Career Path Hacking

Maybe you've always dreamt of getting into the InfoSec field, and have been thinking about getting into information security for a while, or it's just coming to mind now. Regardless of where you are in your journey, welcome to the InfoSec community! In the words of the great Kung Fu Master, Shifu, “There is no level zero.”

If you’ve seen Kung Fu Panda, you may recall that Po is a panda who eats, sleeps, and breathes Kung Fu, yet finds himself outside that community. He dreams of being a warrior. One day, he sees an opportunity to witness a significant moment in Kung Fu history and so he sets out on his journey.  But first, he must climb to the temple. It would have been easy for him to zig-zag his way to the top of the mountain, though it might have taken longer. Instead, he started with the logical place... the stairs - a much shorter path. You too will have to choose your path... read more (external link to guest blog post) 

Baking in security

There's a long-standing synicism around development not taking security into account and security picking up the pieces. In fact it's lead to memes like this:

Author Unknown

For many this cynicism may be hard to take seriously but in light of recent research below it takes on a different real-world perspective. Security is serious business and has serious real-world implications in safety, identity, finance and other areas. It pays to think through what and how you are doing day-to-day life and business. Invest early and enjoy the rewards of that investment for a long time to come!