Blank Space - Filling the Gaps in Atomic and Behavioral Cloud-Specific IoCs

Explore cloud security threats through atomic and behavioral indicators of compromise in this 30-minute conference talk from BSidesSF 2025. Learn how attackers exploit the unique attack surface of cloud environments as adoption continues to grow. Discover atomic IOCs such as IAM metadata and container IDs, alongside behavioral IOCs including API activity patterns. Examine real-world case studies featuring threat actor "Bapak" and other examples that demonstrate how these indicators manifest in actual attacks. Gain practical insights to enhance your cloud detection capabilities, improve threat hunting methodologies, and strengthen incident response strategies specifically tailored for cloud environments.