Purple Teaming AWS with CloudGoat and CloudTrail

No ratings

Presented at PurpleTeamSummit 2020 by

"Threat hunting on cloud data sources is still in its early days and very less published case studies are present on cloud breaches for defenders to learn from. Adversary simulation tool or vulnerable by design labs are great sources for generating interesting data on which a defender can write new detection or validate existing detections. CloudGoat is one such tool developed by Rhino Security Labs made available to community. It provides capability to simulate various attack scenarios by deploying vulnerable cloud resources via terraform and performing attacks outlined as cheatsheet by CloudGoat team.