AWS Cloud Intrusion Investigation Field Guide | THL

Threat Hunting Labs field guide to AWS investigation logs: CloudTrail management and data events, S3 server access logs, VPC Flow Logs, GuardDuty, AWS Config, and the fields and events worth knowing.