Detecting Malicious Cloud Account Behavior - A Look at the New Native Platform Capabilities

Explore the evolving landscape of cloud security in this 49-minute Black Hat conference talk. Delve into the new native platform capabilities for detecting malicious cloud account behavior, as presented by Brad Geesaman. Learn about the cloud attack lifecycle, various detection methods, and real-world attack examples. Gain insights into security centers, dashboards, and tools like GuardDuty. Witness practical demonstrations and understand the importance of enabling specific security features. Discover how major public cloud providers are enhancing their toolsets to identify suspicious activities within customer accounts, potentially indicating compromises.

Intro
The Cloud Attack Lifecycle
Detection Methods
Attack Example
Meat of the Talk
Security Center
Dashboard
Summary
GuardDuty
Demo Overview
Demo Example
GuardDuty Overview
GCP Dashboard
Recap
Should I enable this checkbox