Using AWS Config to Compliment IR Investigations
Most cloud investigations focus around host or endpoint data but there is a wealth of additional information available to an investigation if responders know where to look. The first logical place is CloudTrail logs but if an organization uses AWS Config, it contains a wealth of information that can compliment an investigation that is often overlooked. In this talk, we’ll show how you can pull data from AWS Config and use it in your next incident.
Subscribe today to hear directly from Magnet Forensics on the latest product updates, industry trends, and company news.