Incident Response
AWS EC2 Blocked for Outbound Abuse: Investigation and Recovery
An incident-response workflow for AWS abuse notices, suspicious outbound SSH behavior, containment, evidence review and staged restoration.
Technology
Incident Response field notes
Practical field notes, investigations and operational guidance related to Incident Response.
1 published article