Top Tweets for #cloudtrail
ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories https://t.co/Ch3AOCBpcA #Cybersecurity #ThreatsDay #AndroidRootkit #CloudTrail #RCE
未経験インフラエンジニア10ヶ月。
まだまだだけど、ぼちぼちやってます。笑
下のハッシュタグは、僕が仲良くしてもらってる相棒たちです。
うん。頑張ろう。。。笑
#AWS #EC2 #ALB #CodePipeline #CloudTrail #CloudFront #S3 #AMI #IAM #Route53 #KUSANAGI #NewRelic #Jenkins #Linux #MySQL
Enumerating AWS the quiet way: CloudTrail-free discovery with Resource Explorer #AWSResourceExplorer #CloudTrail #StealthyEnumeration #APILogging #CloudSecurity https://t.co/WewsUd5EHf
TFDrift-Falcoのプロジェクトサイトを公開しました！
✨ 新機能
・リアルタイムブログ（MDX）
・GitHub連携リリースページ
・MkDocsドキュメント統合
CloudTrailベースのTerraform drift検出ツールをぜひチェック👇
https://t.co/CeeZwBiNU0
#Terraform #AWS #DevOps #CloudTrail
In this post recently published on @DarkReading, we take a closer look at getting the most out of CloudTrail.
Read now ⇾ https://t.co/cZOsGH0fdr
#AWS #CloudTrail
Huge thanks to Zack Allen and Detection Engineering Weekly for including @AbianMorina and @danielhbohannon's recent blog article on #CloudTrail logging evasion by leveraging whitespace in IAM policy size limits.
"Ok this is a hilarious vulnerability, and it’s relevant for detection engineers because it’s a fun way to evade logging for threat detection. Morina and Permiso research figured out that you can mess with the IAM policy size limit using whitespace padding. Although AWS specifies a policy character limit, it explicitly states that whitespace is not counted as part of that limit. So, by exceeding the policy limit, CloudTrail says it can’t display the logs due to the character limit but still stores the malicious IAM policy."
https://t.co/4QLgWdbvJE
Thanks to @phillmoore for including @AbianMorina and @danielhbohannon's recent threat research on #CloudTrail logging evasion in his recent issue of This Week in 4n6!
https://t.co/0lGanSG2TD
Big thanks to @AwsSecDigest for covering @AbianMorina and @danielhbohannon's recent #CloudTrail logging evasion vulnerability.
"Simple hacking is the best hacking. What happens if you stick a lot of whitespace in a request to the AWS API? Sometimes maybe good things, sometimes maybe bad things. Abian provides precision about how whitespace is treated in IAM policies and how much whitespace is required to drop a policy from CloudTrail in an iam:CreatePolicy API call. This issue won't be fixed for some time, so it's worth being on the lookout for "requestParameters too large" in CloudTrail."
https://t.co/bagpzonoUz
During recent threat hunting activities, @danielhbohannon and @AbianMorina discovered a subtle, but significant flaw in AWS.
After drilling into IAM policies, they discovered that #CloudTrail fails to log oversized policies due to undocumented size thresholds - a blind spot attackers could take advantage of. Learn how threat actors could exploit this and how #SkyScalpel, an open source tool we introduced at the end of 2024, can help address this flaw.
https://t.co/cVlBXdN0t1
🚨 Learn how to use #AWS's new #CloudTrail network activity events, giving security teams visibility into traffic passing through VPC Endpoints.
Learn why it matters & key tips from @ramimacisabird and @0xdabbad00👇
https://t.co/Sp51jCsofK
Get 2 valentines 💝 from AWS OnAir today at noon PT 👉 https://t.co/yYYljujWbT
- Hear about #DeepSeekAI's R1 model on #AmazonBedrock and Amazon #sageMaker.
- Then learn about AWS #cloudtrail network activity events for VPC endpoints.
#machinelearning #humansecurity
🚨 Sysdig TRT uncovered a logging flaw in Amazon Bedrock APIs: failed API calls were logged as successful in #CloudTrail—potentially resulting in false positives & obscuring real threats.
Read on to see how subtle errors can create big #CloudSecurity gaps:https://t.co/SfCD8KvWWO
I'm so disappointed that I need to extend my previous warning
❗❗If you are using CloudTrail console's "Create Athena table" button to create Athena tables, continue reading
#aws #awscloud #cloudsecurity #cloudtrail #athena #amazonathena
❗ If you are using Amazon Athena to query CloudTrail logs, Please Please Please check if you have this field definition in your table
"webIdFederationData: MAP<STRING,STRING>>>" (under userIdentity.sessionContext)
#aws #awscloud #cloudsecurity #cloudtrail
(1/3)
It's been a bit, how about a new blog post!
https://t.co/KOmLoSy0AV
New version of the AWS Cloud Trail download tool written for FOR509. Lots of new features to make your life easier, let me know what you think!
#for509 #cloudforensics #aws #cloudtrail #dfir
Trend Vision One now collects #CloudTrail logs from AWS accounts, enhancing visibility for easier threat detection.
Discover the various threat scenarios in our report:⬇️ https://t.co/3Ch87zq2ix
🚀 AWS Threat Detection Part 3 - II
Link: https://t.co/iifcjJ6W9G
In the last part, we reviewed CloudTrail logs to investigate suspicious activity. In this part let's analyse ARN & IPs and build a timeline.
#CloudSecurity #AWSSecurity #ThreatDetection #CloudTrail #ThreatHunting
Why is monitoring AWS CloudTrail logs crucial in cloud security?
A) To track billing info
B) To check storage quotas
C) To detect signs of API key compromise
D) To manage user access permissions
🛡️ #CyberSecurity #AWS #CloudTrail #CloudSecurity
(244 characters)
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
240.5M followers
Barack Obama
@barackobama
119.3M followers
Donald J. Trump
@realdonaldtrump
111.7M followers
Cristiano Ronaldo
@cristiano
110.4M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
97.6M followers
NASA
@nasa
92.1M followers
Justin Bieber
@justinbieber
90.9M followers
KATY PERRY
@katyperry
87.5M followers
Taylor Swift
@taylorswift13
81.4M followers
Lady Gaga
@ladygaga
72.9M followers
Kim Kardashian
@kimkardashian
69.7M followers
Virat Kohli
@imvkohli
69.7M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
63.8M followers
The Ellen Show
@theellenshow
62.5M followers
Neymar Jr
@neymarjr
62.4M followers
CNN
@cnn
61.9M followers
X
@x
60.8M followers
Selena Gomez
@selenagomez
60.6M followers