Catch Me if You Can: Hunting Cloud Exfiltration Using Anomaly Detection


Posted on in Presentations

Cloud exfiltration and credentialed access incidents in cloud environments tend to resist detection and often go unnoticed until something else triggers an incident response. This session will summarize several years of working in cloud exfil hunting and detection using a combination of anomaly detection and conventional hunting queries implemented in a Jupyter Notebook.

Participants
Craig Chamberlain

Speaker

Founder, Stealth Project


Share With Your Community