Training: Security - Incident Response Essentials

With Cyber attacks now being classed as one of the top threats to an organisation being able to respond to security incidents is something everyone should be prepared for. With this course you will get a hands-on look at the core tooling AWS provides that would be part of your suite of tools to investigate and deal with security incidents.

Do you know where to look and what to do in AWS to ascertain what breach has taken place in your organisation? If the answer is no then this course is for you. Incident response starts with detection, progresses to investigation, and then follows with remediation. We will help you learn which tooling in AWS addresses all of these stages.

Knowledge you will take away:

• Incident response overview
• CloudTrail (Athena to query the logs)
• GuardDuty (Understanding and triggering alerts)
• IAM Credentials (How to rotate)
• CloudWatch Alerting (Setting this up)
• VPC Flow logs (Enabling and basic analysis)
• AWS Trusted Advisor (Overview and how to use)
• AWS Detective (Overview and how to use)
• When to get help

Who should attend?

This course is relevant to not only security engineers but anyone who may help/deal with a potential security incident.

You do not need any prior experience having dealt with an AWS security incident but familiarity with the console and concepts of AWS would be needed.

A final few things:

This is a hands-on session however, if you prefer, you can simply watch.

Access to an AWS account will be provided, you can also use your own if you prefer.

See you there, Scale Factory Team

Host or Publisher The Scale Factory