bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Thursday, September 3, 2026

AWS CloudTrail Incident Response: Part 2 – Practical Investigation Tactics

This guide dives into real-world AWS incident scenarios—S3 ransomware attacks and crypto-mining via exposed console credentials—showing you how to hunt through CloudTrail logs like a pro. You'll pick up concrete investigative frameworks and terminology to spot suspicious activity before it becomes a nightmare.

source: [aws/security-blog]