Walkthrough of a real phishing-initiated endpoint compromise I investigated. Covers the full attack chain from password-protected PDF to PowerShell loader, forensic analysis in an isolated lab, and the response failures that delayed containment.
Five real-world AWS incident response scenarios with detection signals, containment steps, CLI commands, and automation examples. Practical guide for security teams.
A complete incident response toolkit for AWS — playbook template, Terraform notification pipeline, Lambda alert functions, and a forensic tool reference. Free download.
The full framework for AWS incident response — why cloud IR is fundamentally different, how to build maturity progressively, and how to actually test your plan with tabletop exercises.