fwd:cloudsec Courses

Reusing Control Mappings for AI Security Frameworks in Multi-Cloud Environments

Discover how to efficiently map AI security frameworks to existing cloud security controls, streamline compliance reporting, and identify gaps in MLSecOps across major cloud providers.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

Building Robust Emergency Admin Access to AWS Accounts Using Yubikey and X.509 Certificates

Discover how to implement secure emergency admin access in AWS using smart cards, x.509 certificates, and Yubikey PIV mode for robust disaster recovery solutions.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Hunting AWS Threat Actors Using Access Analyzer Policy Suggestions

Discover how to leverage AWS Access Analyzer for threat detection by creating behavioral baselines, analyzing risk patterns, and implementing SIEM-agnostic hunting techniques across cloud environments.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

Bulletproofing Your Cloud - Lessons from Inside the Borg

Discover essential security controls and implementation strategies for cloud infrastructure, drawing insights from Google's Borg system and applying them to GCP or custom deployments.

• YouTube
• 39 minutes
• Self-Paced
• Free Video

The EKS Hacking Playbook - Lessons From 3 Years of Cloud Security Research

Discover critical security insights for Amazon EKS environments through real-world examples, common misconfigurations, and practical mitigation strategies from experienced cloud security researchers.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Preventing Cloud Compromise by Focusing On-Premise Security

Discover how on-premise security vulnerabilities can compromise cloud environments through real incident response cases, focusing on network security, access management, and logging best practices.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Detecting Cloud Threats with Dynamic Clouds - The HoneyCloud Project

Discover how the HoneyCloud project detects and analyzes cloud-based cyber threats, exploring real-world cases of cryptojacking, P2P worms, and ransomware attacks targeting cloud environments.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

AWS Penetration Testing Methodology - A Practical Approach

Discover a practical methodology for AWS penetration testing, focusing on integrating diverse attack techniques and addressing critical gaps in cloud security assessment approaches.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

How a Control Plane Fail Can Help You Learn About Azure Security

Dive into Azure security fundamentals through a real-world control plane bypass case study, exploring RBAC, permission controls, and critical security measures for robust cloud environment protection.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Freeing Identity From Infrastructure in Multi-Cloud Kubernetes Environments

Discover how to build secure, zero-configuration multi-cloud environments using identity automation and sidecar containers for seamless resource access across AWS, Azure, and Google Cloud platforms.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Trust Me Bro: Preexisting Trust is the New Initial Access Vector

Delve into AWS security vulnerabilities and attack techniques, focusing on trust relationships, IAM roles, and service misconfigurations. Learn defensive strategies against emerging cloud security threats.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Understanding GCP Authentication and Principal Identification Through Cloud Audit Logs

Dive into GCP authentication mechanisms and audit logs to effectively identify principals, track access tokens, and enhance cloud security monitoring through practical demonstrations and real-world scenarios.

• YouTube
• 22 minutes
• Self-Paced
• Free Video

Intercloud Identities - The Risks and Mitigations of Access Between Cloud Providers

Explore the security challenges and solutions for managing cross-cloud access, focusing on authentication mechanisms, potential vulnerabilities, and practical strategies for protecting multi-cloud environments.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

Cloudy with a Chance of Chaos - Building a Shared Responsibility Model for Cloud Security

Discover how to create and implement an internal shared responsibility model for cloud security, drawing insights from Booking.com's journey in optimizing AWS resource protection and team collaboration.

• YouTube
• 21 minutes
• Self-Paced
• Free Video

GCPwn - A Python Framework for Google Cloud Platform Penetration Testing

Discover a Python-based pentesting framework for Google Cloud Platform, featuring enumeration modules for core services and exploit capabilities designed for security professionals and researchers.

• YouTube
• 24 minutes
• Self-Paced
• Free Video