domains / families / security / hunting-for-living-off-the-cloud-techniques

hunting-for-living-off-the-cloud-techniques

separate

Hunts for adversary abuse of legitimate cloud services (Azure, AWS, GCP,

When to use

• When proactively hunting for indicators of hunting for living off the cloud techniques in the environment
• After threat intelligence indicates active campaigns using these techniques
• During incident response to scope compromise related to these techniques
• When EDR or SIEM alerts trigger on related indicators
• During periodic security assessments and purple team exercises

Skill page

Source