Blinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibility
By
Yahav Festinger
Source
unit42.paloaltonetworks.comBlinding the Watchmen: Abusing Cloud Logging Services for Defense Evasion and Visibilitypaloaltonetworks.comYou might also wanna read
Shadow AI in AWS: Detecting and Governing Unauthorized AI Usage in Enterprise Environments
This article examines the emerging challenge of "Shadow AI" in AWS environments — the unauthorized or ungoverned use of generative AI tools
dev.to·6d ago
Keeping Secrets Out of Logs: A Defense-in-Depth Approach
This article discusses strategies for preventing sensitive data (secrets, credentials, PII) from being written to application logs. The auth
The Fundamental Flaws in Traditional Logging and the Case for Wide Events in Observability
The article critiques traditional logging practices in software development, arguing that conventional logs are fundamentally flawed and ins
loggingsucks.com·6mo ago
Building a Transparent Keyserver with Privacy Protections Using Transparency Log Technology
This technical article provides a step-by-step guide to building a transparent keyserver for age public key lookups using transparency log t
CloudFox: An Open-Source Tool for Cloud Attack Path Discovery in AWS, Azure, and GCP
CloudFox is an open-source command-line tool developed by Bishop Fox that helps offensive security professionals (penetration testers and re
undercodetesting.com·17d ago
Windows Defender Vulnerability Allows Malicious File Persistence Through Cloud Tag Detection
The article describes a GitHub repository called 'RedSun' that documents a Windows Defender vulnerability. The vulnerability involves Window
github.com·2mo ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.