Skip to content
AWSForensics

This tool is not affiliated with, endorsed by or sponsored by Amazon Web Services, Inc. or Amazon.com, Inc. AWS, Amazon Web Services, CloudTrail and GuardDuty are trademarks of Amazon.com, Inc. or its affiliates. Other names are trademarks of their respective owners.

Posts tagged: #log-collection

← Back to all posts
CloudTrail limitations: what log forensics cannot tell you
What CloudTrail, VPC Flow Logs and S3 access logs do not record, where baselines fail, and how to write honest conclusions when evidence is missing.
cloudtrailincident-responselog-collectionvpc-flow-logs
CloudTrail log analysis: a step-by-step guide
CloudTrail log analysis in your browser: load the exports, read the verdict and findings, pivot on keys and IPs, build the timeline, then remediate.
cloudtrailincident-responsedetectionlog-collection
How to export CloudTrail, VPC Flow and S3 logs for forensics
Export CloudTrail logs from the trail bucket, event history or CloudTrail Lake, plus VPC Flow Logs, S3 access logs, GuardDuty findings and IAM reports.
log-collectioncloudtrailvpc-flow-logss3

This tool is not affiliated with, endorsed by or sponsored by Amazon Web Services, Inc. or Amazon.com, Inc. AWS, Amazon Web Services, CloudTrail and GuardDuty are trademarks of Amazon.com, Inc. or its affiliates. Other names are trademarks of their respective owners.