AWS Overview

Introduction to AWS core concepts and architecture.

Hands-on Configuration

Practical configuration of AWS services including IAM, EC2, Lambda, and S3. Provides fundamental knowledge before covering how these services are exploited by threat actors.

CloudTrail Fundamentals

Learn core concepts and functionalities of AWS CloudTrail for security monitoring.

Configuring CloudTrail

Master the process of setting up CloudTrail trails to capture relevant events and activities across your AWS environment.

Log Interpretation

Develop ability to decipher CloudTrail logs to identify user activities, API calls, and resource changes.

Threat Detection

Learn to recognize indicators of compromise (IoCs) and anomalies within CloudTrail logs.

Advanced Analysis Techniques

Explore methods for extracting actionable intelligence from CloudTrail data.

Common AWS Attack Vectors

Explore real-world attack scenarios including unauthorized access and data exfiltration.

Threat Actor Tactics

Analyze techniques employed by malicious actors to target AWS environments, aligned with the industry-standard MITRE ATT&CK Framework.

Advanced Threat Hunting with CloudTrail

Analyze attacker methodologies and tactics captured in CloudTrail logs to understand adversary techniques, enabling proactive threat identification and countermeasures.

Practical Tips for Effective Threat Hunting

Learn proven best practices and actionable strategies to perform robust threat hunting with CloudTrail, ensuring efficient monitoring, detection, and response to evolving cyber risks.

Hands-On Labs

Practical exercises configuring AWS services and analyzing real attack scenarios

Live Demonstrations

Instructor-led attack simulations and CloudTrail investigation walkthroughs

Real-World Case Studies

Analysis of actual cloud security incidents and threat actor tactics

Interactive Discussions

Q&A sessions and group analysis of threat detection scenarios