Subscribe / Unsubscribe Enewsletters | Login | Register

Pencil Banner

Four free tools for handling Amazon Web Services security incident response

Tim Greene | Aug. 12, 2016
Researchers presented four tools at Black Hat 2016 that they wrote specifically to deal with incident response in AWS.

The ThreatResponse Web dashboard shows which geographic region of the AWS global network relevant instances are running in and what types of Amazon Machine Images they are running.

ThreatPrep: Designed to help better defend AWS instances, this tool finds places where security could be improved and areas where the amount of forensic evidence that is routinely gathered should be increased. It checks things including whether s3 storage buckets have logging and versioning enabled and whether public reading and writing are disallowed. It determines whether multi-factor authentication is turned on for identity and access management associated with the AWS account. And it looks at whether flow logs are enabled for virtual private clouds.

 

Previous Page  1  2 

Sign up for CIO Asia eNewsletters.