What's in the Cloud? - Cloud Threat Detection and Hunting Strategies

This conference talk from BSidesCharm 2025 explores cloud-based threat detection and hunting strategies designed for mature Security Operations Centers (SOCs). Learn practical approaches using Jupyter notebooks with detections mapped to the MITRE ATT&CK framework and discover how unsupervised machine learning can identify and visualize anomalies in cloud environments. Presented by Kai Iyer, a Security Engineer at Amazon's Enterprise Protection Program and GIAC Certified Security Professional with extensive experience in security engineering, applied machine learning, purple teaming, and incident response. Iyer shares insights from leading teams that deploy production-scale, near-real-time threat hunting models, demonstrating how advanced technologies can address complex cybersecurity challenges in cloud infrastructure.