Sign up to save your podcasts
Or
Share AWS INCIDENT RESPONSE - Automate Containment
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
AWS INCIDENT RESPONSE - Automate Containment
Cloud Security Podcast - NIST Incident response framework has 4 steps including one for Containment. AWS Incident Response being API enabled allows for automating a lot of incident response activity especially containment. In this episode with Damien Burks (Damien - Linkedin) spoke about his @fwdcloudsec talk where he shared how he automated Incident Response in AWS environments of Citi. There were lot more gems dropped so def check out the episode.
Episode YouTube Video - https://youtu.be/IrLuHMLQs_w
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Damien Burks (Damien - Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
A word from our sponsors - you can visit them on snyk.io/csp
(00:00) Introduction
(00:13) A word from our sponsors - Snyk.io/csp
(01:16) A bit about Damien Burks
(02:24) Incident Response in the cloud context
(03:50) Is incident response different in the cloud?
(05:22) Average time for an incident response
(07:33) AWS services for incident response automation
(08:55) AWS Eventbridge
(11:56) The phases of incident response
(13:42) Containment Phase: Starting point and challenges
(17:54) Organisation with Multiple Accounts
(20:09) How to structure the process
(21:04) Containment for EC2 instance
(23:54) Enjoying this cloud security topic so far?
(25:17) Containment for S3 Bucket
(27:57) Where to start with incident response
(30:18) Preparing for Incidents
(32:08) Fun Questions
See you at the next episode!
View all episodes
By TechRiot.io
5
5656 ratings
Cloud Security Podcast - NIST Incident response framework has 4 steps including one for Containment. AWS Incident Response being API enabled allows for automating a lot of incident response activity especially containment. In this episode with Damien Burks (Damien - Linkedin) spoke about his @fwdcloudsec talk where he shared how he automated Incident Response in AWS environments of Citi. There were lot more gems dropped so def check out the episode.
Episode YouTube Video - https://youtu.be/IrLuHMLQs_w
Host Twitter: Ashish Rajan (@hashishrajan)
Guest Socials: Damien Burks (Damien - Linkedin)
Podcast Twitter - @CloudSecPod @CloudSecureNews
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security News
- Cloud Security BootCamp
Spotify TimeStamp for Interview Questions
A word from our sponsors - you can visit them on snyk.io/csp
(00:00) Introduction
(00:13) A word from our sponsors - Snyk.io/csp
(01:16) A bit about Damien Burks
(02:24) Incident Response in the cloud context
(03:50) Is incident response different in the cloud?
(05:22) Average time for an incident response
(07:33) AWS services for incident response automation
(08:55) AWS Eventbridge
(11:56) The phases of incident response
(13:42) Containment Phase: Starting point and challenges
(17:54) Organisation with Multiple Accounts
(20:09) How to structure the process
(21:04) Containment for EC2 instance
(23:54) Enjoying this cloud security topic so far?
(25:17) Containment for S3 Bucket
(27:57) Where to start with incident response
(30:18) Preparing for Incidents
(32:08) Fun Questions
See you at the next episode!
More shows like Cloud Security Podcast
View all
Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
369 Listeners
Risky Business
375 Listeners
The Enterprise AI Show
149 Listeners
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
648 Listeners
CyberWire Daily
1,030 Listeners
Darknet Diaries
8,051 Listeners
Cybersecurity Today
178 Listeners
Kubernetes Podcast from Google
181 Listeners
CISO Series Podcast
192 Listeners
Practical AI
208 Listeners
AWS Podcast
203 Listeners
Defense in Depth
73 Listeners
Cybersecurity Headlines
136 Listeners
Cloud Security Podcast by Google
40 Listeners
Risky Bulletin
45 Listeners