Jared Stroud Cloud Security Researcher Key Takeaways Canarytokens in AWS can aid defenders in post-compromise situations. Eventbridge allows you to create trigger events. Eventbridge custom event patterns allow for alerts on virtually every AWS resource. Background & Previous Work Canarytokens are resources (directories/files/accounts/etc…) that exist to alert an administrator when they’ve been accessed. Sometimes referred [...]
The post DIY Canary Tokens in AWS appeared first on Lacework.
Article Link: DIY Canary Tokens in AWS - Lacework