Incident Response in the Cloud - Foggy with a Ray of Sunshine

Explore incident response challenges and solutions in cloud environments through this comprehensive conference talk from BruCON Security Conference. Delve into three key areas: common problems faced during cloud-based incident response, critical logging requirements for major cloud providers, and automated response techniques. Learn from real-world examples of cloud incident response failures, and gain insights into the confusion surrounding security responsibilities in cloud infrastructures. Discover the essential logs and settings needed for effective incident investigation in Amazon AWS and Microsoft Azure. Examine an automated response use case utilizing Microsoft Azure Security Center and applogic to protect systems and enable advanced analytics when specific alerts are triggered. Equip yourself with the knowledge to overcome increased response times, limited visibility, and resource constraints in cloud security operations.