Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Tue, 11 Apr 2023 17:29:01 GMT
———————————————
✏️Title: Steps to Enable CloudTrail for an AWS Organization
———————————————
📎Link: https://medium.com/p/bbf360b6315e
———————————————
Tags: #cloud_security #cloudtrail #aws #organization #cybersecurity

Medium

Steps to Enable CloudTrail for an AWS Organization

ACM.187 View all your CloudTrail logs for an organization in one place

2 views18:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Fri, 14 Apr 2023 00:04:16 GMT
———————————————
✏️Title: Create A KMS Key for AWS Organizations Trail
———————————————
📎Link: https://medium.com/p/247b91d27e7e
———————————————
Tags: #cybersecurity #cloud_security #organization_trail #aws #cloudtrail

Medium

Create A KMS Key for AWS Organizations Trail

ACM.189 Next step to set up an AWS Organizations CloudTrail

3 views02:00

Daily Writeups

⤷ Title: TrailAlerts: Take Control of Cloud Detection in AWS
════════════════════════
𐀪 Author: Adan
════════════════════════
ⴵ Time: Sun, 04 May 2025 17:36:09 GMT
════════════════════════
⌗ Tags: #cybersecurity #aws_security #cloudtrail #detection_engineering

Medium

TrailAlerts: Take Control of Cloud Detection in AWS

Introducing TrailAlerts: a serverless, open-source tool to define Sigma rules and get rich, customizable alerts from your AWS account.

22 views18:04

Daily Writeups

⤷ Title: How I Built an “Early Warning System” for My AWS Account with CloudTrail and CloudWatch
════════════════════════
𐀪 Author: Aashishchaudhari
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 10:31:28 GMT
════════════════════════
⌗ Tags: #cloudwatch #aws #cybersecurity #cloud_security #cloudtrail

Medium

How I Built an “Early Warning System” for My AWS Account with CloudTrail and CloudWatch

A step-by-step project log of tracking API calls, creating custom alarms for unauthorized access, and testing the entire setup.

21 views11:04

Daily Writeups

⤷ Title: Cloud Snitch: New Open-Source Tool Reveals Hidden Activity & Bolsters Least Privilege in Your AWS Accounts
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 09 Jul 2025 00:38:03 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AWS #cloud security #CloudTrail #Compliance #cybersecurity #IAM #Identity and Access Management #Least Privilege #open source #Security Monitoring

Penetration Testing Tools

Cloud Snitch: New Open-Source Tool Reveals Hidden Activity & Bolsters Least Privilege in Your AWS Accounts

Cloud Snitch is a new open-source tool for exploring AWS account activity, highlighting errors, documenting principals, and generating service control policies for least privilege access.

31 views01:03

Daily Writeups

⤷ Title: RAG-Powered CloudTrail Threat Detection & Modelling /w Gemini 2.5 pro model
════════════════════════
𐀪 Author: ~ goody
════════════════════════
ⴵ Time: Wed, 17 Sep 2025 11:47:47 GMT
════════════════════════
⌗ Tags: #cybersecurity #cloudtrail #llm_applications #gemini #rags

Medium

RAG-Powered CloudTrail Threat Detection & Modelling /w Gemini 2.5 pro model

As part of my MSc in Cybersecurity dissertation, I designed and developed a project to tackle a growing challenge in cloud security: moving…

19 views12:04

Daily Writeups

⤷ Title: The “WorkMail Pivot”: Hackers Abuse AWS WorkMail to Bypass SES Sandbox
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 30 Jan 2026 00:09:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Amazon SES #AWS #Cloud Security #CloudTrail Blind Spot #Email Security #phishing infrastructure #Rapid7 #SCP #truffleHog #WorkMail

Daily CyberSecurity

The "WorkMail Pivot": Hackers Abuse AWS WorkMail to Bypass SES Sandbox

Attackers are bypassing AWS SES sandbox limits by pivoting to WorkMail. Rapid7 reveals how this abuse creates a blind spot for defenders.

7 views12:08

Daily Writeups

⤷ Title: Locking the Locks: How “RansomWhen” Unmasks the Identities Hijacking Your AWS S3 Buckets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 11 Feb 2026 07:59:18 +0000
════════════════════════
⌗ Tags: #Open Source Tool #AWS security #cloud defense #CloudTrail #Data Protection #IAM identities #KMS encryption #Permiso Security #RansomWhen #S3 ransomware #Tech News 2026 #Threat Hunting

Penetration Testing Tools

Locking the Locks: How "RansomWhen" Unmasks the Identities Hijacking Your AWS S3 Buckets

RansomWhen is the new open-source essential for AWS. Enumerate identities capable of locking S3 buckets with KMS and detect live ransomware events in minutes.

32 views08:03

Daily Writeups

⤷ Title: [HackTheBox Sherlocks] — OpTinselTrace-2 (AWS CloudTrail investigation)
════════════════════════
𐀪 Author: Chicken0248
════════════════════════
ⴵ Time: Sat, 11 Apr 2026 06:01:22 GMT
════════════════════════
⌗ Tags: #hackthebox #cybersecurity #hackthebox_writeup #cloudtrail #blue_team

Medium

[HackTheBox Sherlocks] OpTinselTrace-2 (AWS CloudTrail investigation)

Using TrailInspector to investigate AWS CloudTrail logs

22 views07:04

About

Blog

Apps

Platform