#CloudForensics
#CloudForensics #DataProtection #ThreatResearch Cado simplifies cloud investigations by automating data capture across AWS, Azure, and GCP, offering unified visibility for effective threat mitigat... https://www.hendryadrian.com/from-data-capture-to-analysis-how-cado-simplifies-cloud-investigations/
January 17, 2025 at 9:35 AM
#Ransomware threat actors are increasingly abusing #AWS Server-Side Encryption (SSE-C) to encrypt S3 buckets. Most recently a TA known as #Codefinger is using this technique.

🕵 Monitoring S3 & encryption activity via CloudTrail & GuardDuty.

www.halcyon.ai/blog/abusing...

#CloudForensics #FOR509
Abusing AWS Native Services: Ransomware Encrypting S3 Buckets with SSE-C
The Halcyon RISE Team has identified a unique ransomware technique that encrypts Amazon S3 buckets with no known method to recover unless a ransom is paid...
www.halcyon.ai
January 14, 2025 at 3:46 AM
Are you busy on Thursday? Join our EC Council webinar and dive into cloud forensics and the artifacts from both big and little cloud sources. Sign up: https://attendee.gotowebinar.com/register/1738583418737186911?source=Speaker+Share #DFIR #CloudForensics
November 17, 2025 at 4:17 PM
Think you know forensics? 💾 Think again. Mitiga's Ofer Maor from #RSAC2025 explains why cloud, identity, & SaaS demand new tools & skills.

Time to level up your #CloudForensics game! #CybersecuritySkills youtube.com/shorts/nQ-W3...
Cloud Forensics Investigation: Not What You Think! #cloudsecurity
YouTube video by Mitiga
youtube.com
June 10, 2025 at 4:32 PM
Have you caught up on all the great content from #MagnetVirtualSummit 2025? Watch recordings from most of the sessions on-demand (and for free!) and learn about topics like #MobileForensics, #CloudForensics, #AI, #Crypto, and much more: ow.ly/tse150VgSkS #MVS2025
March 12, 2025 at 8:19 PM
#MagnetVirtualSummit 2025 was packed with great #DFIR content on topics like #MobileForensics, #CloudForensics, #AI, #Crypto, and much more! If you missed anything, nearly all presentations are now available on demand for free. Find them all here: ow.ly/luvJ50V2SIM #MVS2025
February 19, 2025 at 4:27 PM
🚨 Alert on new credentials added to SPs.
🔥 Monitor changes to federated domains (federationConfiguration).
🕵🏼‍♂️ Hunt unusual Graph API calls to /domains, /credentials, and /federationConfiguration.

#DFIR #ThreatHunting #EntraID #CloudForensics #M365 #ThreatDetection
July 19, 2025 at 4:18 AM