AWS Certified Security - Specialty (SCS-C02) Cert Prep: 1 Threat Detection and Incident Response

Learn about threat detection and incident response while preparing for the AWS Security Specialty (SCS-C02) exam.

Introduction

• Course overview

1. Domain 1: Threat Detection and Incident Response

• Designing and implementing incident response plans
• Demo: AWS Security Hub
• Responding to compromised resources and workloads
• Automating incident response with AWS Lambda
• Conducting root cause analysis with Amazon Detective
• Capturing forensics data from compromised resources
• Querying logs to validate security events
• Preserving forensic artifacts with S3 Object Lock
• Preparing and recovering services after incidents
• High availability
• Compliance

Conclusion

• Threat detection and incident response summary