Optimizing Cloud Detection & Response With Security Chaos Engineering
summary
Security chaos engineering runs agentless experiments through Mitigant Cloud Immunity against AWS and Datadog, using GuardDuty and Detective plus Datadog Cloud SIEM to validate Cloud Detection & Response. The platform executes MITRE-based scenarios (public S3, lambda removed from VPC, IAM user/login profile creation) and reliably finds blindspots: login-profile creation appears as low-severity in Datadog, several ATT&CK techniques are missed, CloudTrail evidence arrives with minutes of delay, and successful remediation requires pre-granted API privileges.
AI-written summary · about
chapters (8)
- 0:00Introduction to SCE
- 4:53Core concepts of SCE
- 7:52Practicing SCE strategies
- 10:44The SCE workflow
- 15:42Cloud detection limitations
- 19:42CDR technical overview
- 23:16AndroxGhost malware study
- 27:07SCE demo and conclusion
related talks
29mAutomating Threat Detection and Remediation
21mRecognizing and avoiding cloud security survival mode
56mContinuous innovation in AWS detection and response services
48mDevSecOps: Spin Up Cloud Security, Discover, Classify and Protect Sensitive Data
45mJourney to Securing the Cloud: Detecting and Fixing Misconfigurations at Datadog
32mAdvanced threat detection and response on AWS
55mStreamline security analysis with Amazon Detective
13mA guide to strengthening your threat detection and response