Incident Response
AWS EC2 Blocked for Outbound Abuse: Investigation and Recovery
An incident-response workflow for AWS abuse notices, suspicious outbound SSH behavior, containment, evidence review and staged restoration.
Technology
Security Groups field notes
Practical field notes, investigations and operational guidance related to Security Groups.
2 published articles