Modernize Your Threat Detection and Remediation Process Using Cloud Services

Опубликовано 12 июля 2018, 18:05

AWS Public Sector Summit 2018 - Washington, D.C.

Responding to an incident requires that you're aware that an incident exists. To be aware that an incident exists, you have to know where to look and what to look for. In this session, you will learn the tools and techniques to take in the breadth of visibility that AWS offers to your environment as well as some ideas on how to inspect events of interest and identify indicators of compromise.

We will introduce several methods of threat detection and remediation on AWS, including GuardDuty, Macie, Lambda, AWS Config. We will talk about how to put them all together, to have a comprehensive threat detection and remediation solution. We will also discuss how to use these services across multiple AWS accounts and regions, to cover the governance needs of enterprise AWS deployments.

Speaker: Nathan Case