September meeting details

[Tactical Failure]

Hello Hackers!

This month, we will be joined by Alex Groyz who will be sharing with us
about automating containment of AWS services during incident response:

Any organization with sensitive data can be the target of a cyberattack,
regardless of size or industry sector. As more and more enterprises move
to the cloud, the threat landscape is evolving at an accelerated rate in
which adversaries deploy advanced tactics to reach their end goal.
Incident response is critical in securing your data and preventing an
attack from wreaking havoc on your organization.

After detecting an event in the detection phase of an incident response
and analyzing it in the analysis phase — I will present a solution that
you can use to automate the containment of the four supported AWS
services: IAM User, IAM Roles, Lambda Functions, and EC2 instances.

Alex Groyz is a cloud security architect at Vectra AI specializing in
AWS. He has broad knowledge across the technology spectrum. Alex helps
customers create a hybrid cloud migration strategy and build their
presence on the cloud. He has over a decade of experience in various
engineering roles and enjoys working with diverse stakeholders with a
focus on the cloud
As usual, we will be meeting online at https://cafe.cyberia.club/dc612.

Talk starts at 6:12 PM U.S. Central, but feel free to hop in early and chat.

— TactiFail

https://dc612.org/index.php/2023/09/05/thursday-september-14th-612pm-virtual/