fwd:cloudsec Courses

Who Watches the Watchmen? Stealing Credentials from Policy-as-Code Engines and Beyond

Explore novel security vulnerabilities in policy-as-code engines, focusing on credential theft techniques, DNS tunneling exploits, and defensive measures for protecting cloud infrastructure deployments.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

How to 10X Your Cloud Security Without the Series D

Discover practical strategies and actionable insights for scaling cloud security programs efficiently, covering current best practices and future trends in infrastructure protection.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Doing Bad Things for the Right Reasons - A Look at the AWS Vulnerability Disclosure and Remediation Process

Explore AWS vulnerability disclosure processes, from research approaches and coordinated disclosure to embargo periods and real-world examples of responsible security findings reporting in cloud environments.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Hidden Among the Clouds - Discovering and Analyzing Undocumented AWS APIs

Discover methodologies for identifying undocumented AWS APIs, their security implications, and learn to use open-source tools for detecting hidden cloud vulnerabilities and potential attack vectors.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Hidden in Plain Sight - Abusing Entra's Administrative Units

Discover how Administrative Units in Entra ID can be exploited for tenant persistence, including obscure parameters and restrictions that attackers leverage, plus detection and remediation strategies.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Building Your Own CloudTrail with AWS IAM and Cedar Authorization Framework

Discover how to implement AWS IAM principles and Cedar authorization framework to build secure cloud services with comprehensive audit logging capabilities, inspired by CloudTrail architecture.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Kubernetes Audit Log Gotchas: Challenges in Multi-Cloud Detection and Forensics

Explore practical challenges and solutions for managing Kubernetes audit logs across cloud providers, including logging policies, format differences, and their impact on security detection capabilities.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Cloud-Conscious Tactics, Techniques, and Procedures (TTPs) - An Overview

Discover common cloud attack techniques and defense strategies through real incident response cases, focusing on unauthorized access, data theft, and ransomware deployment in cloud environments.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

GCP and AWS Identity Federation - Lessons Learned from the Field for Cross-Cloud Forensics and Incident Response

Dive into cross-cloud identity federation between GCP and AWS, exploring implementation strategies, forensics capabilities, and automated incident response techniques using AssumeRoleWithWebIdentity.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Staying Sneaky in Microsoft Azure - Advanced Attack Detection and Prevention

Discover undocumented Azure APIs and stealthy attack methods while learning defensive controls and telemetry monitoring to enhance cloud security posture and detection capabilities.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Service Agents and the Search for Transitive Access in Google Cloud Platform

Dive into the security implications of GCP Service Agents, exploring their administrative powers, potential abuse vectors, and how transitive access techniques can lead to unauthorized data access in cloud environments.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Ransomware Riddle: Untying Cloud Security Mysteries

Explore real-world hybrid ransomware attacks and innovative detection methods using graph-based correlations to protect cloud environments and prevent costly security breaches.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

From Intrusion to Insight: Lessons Learned From a Month-Long AWS Compromise

Dive into real-world AWS security insights through a detailed analysis of a 2024 cloud compromise, featuring unknown attack techniques and practical incident response strategies for cloud defenders.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

The Dark Economy of Stolen Cloud Accounts in Phishing Attacks

Uncover the underground market of stolen Amazon SES accounts and their role in phishing campaigns, while learning detection methods and defensive strategies for cloud-native email security threats.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Is LLM All You Need for CloudTrail Analysis

Explore the capabilities and limitations of using Large Language Models for CloudTrail log analysis, featuring practical demonstrations and advanced techniques for security operations.

• YouTube
• 45 minutes
• Self-Paced
• Free Video