Cloud Incident Response and Forensic Training, held by Fircy

Fircy in collaboration with the Australian Cyber Collaboration and ISACA Adelaide Chapter, held a full day of Cloud Incident and Forensic Training in The Centre’s Cyber Range.

Ben Potter from Fircy delivered the workshops, that were designed to assist participants in developing critical skills, technical capabilities, and equip them the foundational knowledge to respond to incidents in the cloud with a focus on Amazon Web Services (AWS).

The morning workshop was an itroduction to cloud incident response (IR) where the participants were introduced to Cloud IR terminology, threat actors, data exfiltration and native and open-source tools for collection & analysis.

The afternoon session was an advanced hands-on workshop based on real incidents in the AWS cloud. Participants ran thorough practical exercises and scenarios which included, threat hunting, log diving and evidence handling.

Ben also discussed with the participants best practices that he applies to his daily routine, such as how to analyse reports in a precise and optimal way, along with how to filter out unnecessary information.

The Centre is excited to announce that we have secured 3 more training workshops with Fircy - details will be released soon.