Incident Response and Forensics in AWS

Tech 1 (718A) November 14, 2017 1:25 pm - 2:25 pm Feedback     

Bookmark and Share

Jonathon Poling

Moving from on-premises deployments to the cloud can offer incredible benefits to many organizations, including a plethora of capabilities to build, scale, modify, monitor, and tear down infrastructure with never before seen speed and agility. But, how do you monitor for, and respond to, attackers that leverage those same capabilities against you? In this session, we will compare performing Digital Forensics and Incident Response (DFIR) within AWS versus that as traditionally performed within on-premises environments. Learn the major differences in performing DFIR within AWS, along with the benefits it provides over traditional response within on-premises environments.