Incident Response in the Cloud (AWS) - SANS Digital Forensics & Incident Response Summit 2017

Moving from on-premises deployments to the cloud can offer incredible benefits to many organizations, including a plethora of capabilities to build, scale, modify, monitor, and tear down infrastructure with never-before-seen speed and agility. But, how do you monitor for, and respond to, attackers that leverage those same capabilities against you? In this session, we will compare and contrast performing digital forensics and incident response (DFIR) within AWS versus that as traditionally performed within on-premises environments. Learn the major differences in performing DFIR within AWS, along with the benefits it provides over traditional response within on-premises environments.
Jonathon Poling (@JPoForenso), Principal Consultant / Future Operations, SecureWorks

[@ma34529]

Great talk!

[@daveiooo]

Great talk. Very informative and engaging

[@melissasneed1373]

Thank you for the great talk!

[@Happyspring.715]

i love it i;m going to wach it evrey day
at lest

[@Mahesh-op3nw]

I thought that there would be a practical demonstration of digital forensics on any prem...like how it would be done... and what are the log changes occurred...

[@simple-Earthling]

nah, most of these talks explain why incident response is important..like duh..how about in depth methods...