https://www.logsec.cloud/tags/s3/ Recent content in s3 on logsec Hugo -- gohugo.io Sat, 20 Jun 2020 00:00:00 +0000 https://www.logsec.cloud/posts/detect-public-s3-bucket-using-splunk/ Sat, 20 Jun 2020 00:00:00 +0000 https://www.logsec.cloud/posts/detect-public-s3-bucket-using-splunk/ Splunk searches over CloudTrail logs that catch S3 buckets made public through the console, canned ACLs or grant flags, plus how to respond and prevent it. https://www.logsec.cloud/posts/investigating-on-aws/ Thu, 04 Jun 2020 00:00:00 +0000 https://www.logsec.cloud/posts/investigating-on-aws/ Investigating unknown AWSConfig requests against S3 buckets, reproducing them in a lab, and how AWS Config could be used to check whether a bucket exists.