Incident Response
AWS EC2 Blocked for Outbound Abuse: Investigation and Recovery
An incident-response workflow for AWS abuse notices, suspicious outbound SSH behavior, containment, evidence review and staged restoration.
Technology
EC2 field notes
Practical field notes, investigations and operational guidance related to EC2.
1 published article