This lab write-up credits SANS for the Workshop on Building Detections in AWS. It replicates the workshop guide by the Cloud Security SANS Team. Following the instructions may result in an AWS billing of around $2, considering prompt resource deletion after completing the lab.
💨 Research the attack technique — Lab 1
💨 Set up proper logging — Lab 2
💨 Attack realistic assets — Lab 3
💨 Review log data — Lab 4
💨 Build detection — Lab 5
Lab 1: Research the attack technique/ Infrastructure Deployment
Lab 2: Setting up API Event Logging
Lab 3: Attacking the Cloud Account
Lab 4: Detecting the Attack
Lab 5: Building an Automated Detection
Lab 6: Deleting Created Resources
🕵️♂️ Complete READ-UP
👉 Website walkthrough: https://building-detections-aws.sanscloudwars.com/
👉 Video Walkthrough: https://www.youtube.com/watch?v=FZKZuNk49Dw