Using AWS Config to Compliment IR Investigations
Most cloud investigations focus around host or endpoint data but there is a wealth of additional information available to an investigation if responders know where to look. The first logical place is CloudTrail logs but if an organization uses AWS Config, it contains a wealth of information that can compliment an investigation that is often overlooked. In this talk, we’ll show how you can pull data from AWS Config and use it in your next incident.
Jamie McQuaid CISSP, CFCE, EnCE is a forensics investigator with a background in corporate investigations spanning various industries from telecommunications to financial services and manufacturing. His responsibilities included conducting both forensic and physical investigations as well as incident response globally across the organization. McQuaid is currently a Forensics Consultant at Magnet Forensics where he assists in the development of Magnet AXIOM and provides skilled support to customers with his combined knowledge of Magnet AXIOM and digital forensics. He holds an Advanced Diploma in Computer Security and Investigations from Fleming College and an Honours B.A. from the University of Toronto.
DURATION
Subscribe today to hear directly from Magnet Forensics on the latest product updates, industry trends, and company news.