Adan – Medium

Adan

Pinned

Adan

Cybersecurity — It’s All About Trust

Last year, I wrote about the importance of understanding risks in cybersecurity and the critical role of risk reduction. Recently, I’ve…

Dec 30, 2023

Cybersecurity — It’s All About Trust

Dec 30, 2023

Adan

Automating Incident Response in AWS: Blocking a Compromised Identity Center User

When responding to incidents, especially in the cloud, every second matters as large parts of the attack might be automated. Because of…

Jun 3

Automating Incident Response in AWS: Blocking a Compromised Identity Center User

Jun 3

Adan

Deterring Attackers with HoneyTrail: Deploying Deception in AWS

I’ve always been a big fan of deception and honeypots. Even my final degree project was about implementing a honeypot with active blocking…

May 12

Deterring Attackers with HoneyTrail: Deploying Deception in AWS

May 12

Adan

What’s New in TrailDiscover: Integrating Permissions Information, Alerting, and Simulations

First and foremost, I want to say a big thank you to everyone who has taken the time to share, use, or comment on TrailDiscover. It’s been…

Apr 6

What’s New in TrailDiscover: Integrating Permissions Information, Alerting, and Simulations

Apr 6

Adan

Introducing TrailDiscover: Simplifying Access to Security Insights about CloudTrail Events

I’m excited to announce the launch of TrailDiscover, a new initiative to gather CloudTrail events linked to security incidents or actions…

Mar 3

Introducing TrailDiscover: Simplifying Access to Security Insights about CloudTrail Events

Mar 3

Adan
in
AWS Tip

Enhancing AWS GuardDuty Alerts with GuardDutyInsightfulAlerts

In my previous articles, I’ve explored various AWS services from an attacker’s viewpoint, discussing potential post-exploitation attacks…

Dec 6, 2023

Enhancing AWS GuardDuty Alerts with GuardDutyInsightfulAlerts

Dec 6, 2023

Adan
in
AWS Tip

Lambda Extensions: Exploring Misuse Scenarios and Stratus Red Team Module Development

After investigating potential post-exploitation attacks against various AWS services such as CloudFront, AppSync, and ALB, this article…

Nov 15, 2023

Lambda Extensions: Exploring Misuse Scenarios and Stratus Red Team Module Development

Nov 15, 2023

Adan

Rigging the Rules: Manipulating AWS ALB to Mine Sensitive Data

In our ongoing exploration of post-exploitation attack vectors within AWS services, we’ve previously examined potential attacks against…

Oct 24, 2023

Rigging the Rules: Manipulating AWS ALB to Mine Sensitive Data

Oct 24, 2023

Adan

Distorting the Sync: How AWS AppSync Can Be Turned into an Attacker’s Backdoor

After my last article, where I explored unconventional methods attackers might employ to compromise an AWS account and get information from…

Oct 3, 2023

Distorting the Sync: How AWS AppSync Can Be Turned into an Attacker’s Backdoor

Oct 3, 2023

Adan

How Attackers Can Misuse AWS CloudFront Access to Make It ‘Rain’ Cookies

AWS offers many different services, each with different configuration options. With so many options available, there are numerous…

Sep 14, 2023

How Attackers Can Misuse AWS CloudFront Access to Make It ‘Rain’ Cookies

Sep 14, 2023

Adan

Adan

Cyber Security Engineer interested in Pentesting | Cloud Security | Adversary Emulation | Threat Hunting | Purple Teaming | SecDevOps - https://adan.cloud/

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams