@goodycyb

Threat detection🕵️‍♂️ With Flaws.cloud CloudTrail Logs using ELK Stack

Sep 29, 2024 · 2 min read · This project demonstrates the deployment of the ELK Stack on an AWS EC2 instance and the ingestion of Flaws.cloud CloudTrail logs into the ELK Stack for threat detection. 💡 Side Note: When you click on the link in each step, you will be redirected...

Exploiting Lambda Vulnerabilities for Privilege Escalation in AWS

Jul 5, 2024 · 6 min read · Introduction In this lab, you start as the 'bilbo' user. You will assume a role with more privileges, discover a lambda function that applies policies to users, and exploit a vulnerability in the function to escalate the privileges of the Bilbo user ...

Threat detection🕵️‍♂️ in AWS using Amazon Athena Service

Feb 4, 2024 · 17 min read · I recommend starting with the article below before beginning the Hands-on lab.😉🕵️‍♂️ https://medium.com/@goodycyb/threat-detection-in-aws-using-amazon-athena-to-analyze-cloudtrail-logs-from-flaws-cloud-00a43348d18a Objective In this lab, you wil...

Identifying Confidential Data Exposure in Amazon S3 Bucket Using Amazon Macie

Jan 28, 2024 · 9 min read · Introduction Amazon Macie is an AWS service specializing in data security, particularly for safeguarding sensitive information. It automatically detects such data in S3 buckets, alerting users to potential security risks. Macie is crucial for organiz...

Accessing Secrets from misconfigured S3 Bucket Version control

Sep 1, 2023 · 9 min read · In this CTF, you will play the role of a Cloud Security Consultant. Your team's services have been enlisted by Huge Logistics to conduct an external assessment of their cloud environment. Your assignment involves assessing an IP range, which includes...