Incident Response in the Cloud (AWS) - SANS Digital Forensics & Incident Response Summit 2017

Moving from on-premises deployments to the cloud can offer incredible benefits to many organizations, including a plethora of capabilities to build, scale, modify, monitor, and tear down infrastructure with never-before-seen speed and agility. But, how do you monitor for, and respond to, attackers that leverage those same capabilities against you? In this session, we will compare and contrast performing digital forensics and incident response (DFIR) within AWS versus that as traditionally performed within on-premises environments. Learn the major differences in performing DFIR within AWS, along with the benefits it provides over traditional response within on-premises environments.

Jonathon Poling (@JPoForenso), Principal Consultant / Future Operations, SecureWorks