Cloud threat actors often rely on noisy, predictable tactics. But what if they improved their methods even slightly? Would defenses still hold up? This session will cover real-world AWS attacker tradecraft, critique their techniques, and demonstrate improved methods that evade detection. Attendees will come away with advanced AWS exploitation skills and ways to potentially to detect them.