Amazon Web Services Cloud Incident Response Training at the A3C

29 November 2021

The A3C proudly partnered again with AustCyber (AustCyber SA Node) together with Amazon Web Services (AWS) to deliver a unique free training event, “AWS Cloud Incident Response Training - Credential Misuse” in the A3C Cyber Test Range.

This training was previously run in July 2021 and in such strong demand that the session was run for a second time.

Mishandling or insecurely storing credentials can end in a security event that you need to investigate and respond to. But what do you need to know to identify and remediate potential issues caused by the misuse of credentials?

This event was tailored for those studying or new to working in a security operations related role who may have had limited experience responding to incidents in the cloud, and/or want to grow their knowledge and capability in this domain.

This full day course took participants through:

• The different types of credentials and what they can be used for

• Permissions management

• Hands on Create an API key with permission to a basic function

• Common places to use credentials

• Where credentials have been found and misused

• Detective controls

• Hands on: Discover where you created API key using detective controls

• Hands on: Share your API key with your partner (pretend adversary) and try using each other’s

• Log diving and indicators

• Containment techniques

• Hands on: Contain and eradicate your adversary

• Privilege escalation and persistence techniques

• Hands on: Create persistence

• Best practices for API keys and using temporary credentials

• Summary of learnings, questions & answers, feedback

Participants received a certificate of completion.

Please check the A3C events calendar on our website to register for future training.