/ir-ec2-cryptomining

Deploy lab environment resources for Cybr's IR course

Primary LanguageShellGNU General Public License v3.0GPL-3.0

ir-ec2-cryptomining

Resources including scripts and a playbook for how to respond to AWS IAM compromised credentials leading to EC2 cryptojacking.

This repository and these scripts are meant to be used with Cybr's course: Incident Response with CloudTrail and Athena