Elevate your security investigations with using Generative AI

2024 DC Summit - Builder Session team SEC210: Elevate your security investigations with using Generative AI

I had the great opportunity to co-lead a Builder Session at the AWS DC Summit in June 2024. I worked with a few folks the Amazon Detective service and AWS Security lake team to run a 1 hour hands-on workshop SEC210- Elevate your security investigations using Generative AI. What did we do? We use a vulnerable Grafana instance and performed SSRF on the host to download objects out of S3. We walked attendees through how to perform the incident investigation using Amazon Detective with GuardDuty, Inspector and Macie. We also focused on some nifty new features from Detective, finding group summaries.

New Customer Security Spotlight episode featuring the Starbucks Platform Engineering team

Join me tomorrow for a discussion with the amazing Starbucks Platform team, Ross Abbott and D. Ryan Hild as we talk security, devops, engineering and coffee! This team has great insights to share on their approach including guiding principles and philosophies-I’m excited! Checkout the recording here: https://www.twitch.

Blog Post: Top four ways to improve your Security Hub security score

Security Hub is a great tool to monitor the security posture of your AWS accounts. It generates findings for misconfigurations, questionable configurations on AWS resources. Customers told us it was difficult to improve the account posture at scale so Priyank Ghedia and I took it upon ourselves to provide guidance

Extending Security Ownership Across Your Organization: A conversation with Megan O’Neil, Principal Security Solutions Architect at AWS

In this chat with AWS enterprise strategist, Clarke Rodgers, Megan discusses the benefits of extending security ownership beyond the security department. Here at AWS, identifying vulnerabilities isn’t just the responsibility of the security team — every employee is empowered and expected to report potential security issues. In Megan’s own

Re:Inforce 2021 - The anatomy of ransomware event targeting data residing in Amazon S3

In June 2021, I had the opportunity to co-present at the AWS re:Inforce conference in Boston. My first session is with Kyle Dickinson and Karthik Ramanujam, Our Chalk Talk covered the anatomy of a ransomware event targeting data residing in Amazon S3. Check out the event pattern:

Read more

New Customer Security Spotlight episode featuring the Starbucks Platform Engineering team

Blog Post: Top four ways to improve your Security Hub security score

Extending Security Ownership Across Your Organization: A conversation with Megan O’Neil, Principal Security Solutions Architect at AWS

Re:Inforce 2021 - The anatomy of ransomware event targeting data residing in Amazon S3