Evidence search
Search
Search titles, summaries, topics, providers, authors, and the full open-access corpus.
Results for “AWSSupport-ContainEC2Instance”
2 publicationsTechnical guideSource-based analysisTechnical guideSource-based analysis
Verify EC2 containment beyond a security group change
Swapping a compromised EC2 instance into an isolation security group stops new connections, not tracked ones. Learn which flows survive, how long idle timeouts let them run, and how to prove the cut happened.
Detection & response · Amazon Web Services · By Cloud Security DeskMap cloud incident response to NIST SP 800-61 Revision 3
Revision 3 turned NIST's incident handling guide into a CSF 2.0 profile. Translate its rows into provider contracts, cloud evidence, containment authority and recovery ownership, and fix the log defaults first.
Detection & response · NIST / Amazon Web Services / Microsoft Azure / Google Cloud · By Cloud Security Desk