Follow us on LinkedIn | Twitter | GitHub| Medium Our cloud incident response trainings are now available! Background We’ve written quite a few blogs on AWS incident response [1],[2] and most recently on how you can use Sigma and Athena for incident detection and response. Today, we’re proud to announce a…

Follow us on LinkedIn | Twitter | GitHub| Medium Our cloud incident response trainings are now available! Hopefully by now you know, our business is cloud incident response. What if we told you, there are ways to prevent or limit the impact of an incident in the Micrsoft Azure cloud…

Follow us on LinkedIn | Twitter | GitHub| Medium Our cloud incident response trainings are now available! Background Identifying which activities adversaries have performed in a compromised AWS environment is not an easy task. Therefore together with @BertJanCyber we have performed research to investigate if Sigma rules can provide first-response capabilities…

Incident Response in AWS made easy (easier 😉) Our cloud incident response trainings are now available! As enthusiastic cloud incident responders we’ve had our fair share of AWS incidents. If you say incident response and AWS you say CloudTrail, it’s the most important source for your investigations. Therefore we’ve decided…

Our cloud incident response trainings are now available! This blog post was first released on cloud-response.com one of our personal projects. We’ve decided to move it here, because that domain might go away and it’s a useful blog for a lot of people so we want to keep it around. Introduction …

Emerging Tactics and Trends Our cloud incident response trainings are now available! About Invictus Incident Response We are an incident response company and we ❤️ the cloud and specialise in supporting organisations facing a cyber attack. We help our clients stay undefeated! 🆘 Incident Response support reach out to cert@invictus-ir.com…

Accelerate your cloud incident response in Microsoft environments Our cloud incident response trainings are now available! About Invictus Incident Response We are an incident response company and we ❤️ the cloud and specialise in supporting organisations facing a cyber attack. We help our clients stay undefeated! 🆘 Incident Response support…

Insights from practical experience Our cloud incident response trainings are now available! Background Recently we were engaged by a company after they were targeted by a ransomware attack in their AWS environment. In this blog we want to show you what happened and how we were able to piece together the…

Follow us on LinkedIn | Twitter | GitHub| Medium Our cloud incident response trainings are now available! Introduction In this blog, we present various scenarios in which threat actors can utilise email forwarding rules and the associated evidence in the UAL. Additionally, we have created a comprehensive mind map that summarises…