AWS MITRE ATT&CK: Expel Mind Map Kit

Your cloud investigations just got easier.

Sure, you know MITRE ATT&CK tactics. And yeah, you’re pretty familiar with Amazon Web Services (AWS).

But how does the classic MITRE ATT&CK framework map to the hundreds of services a crafty attacker might use to infiltrate AWS cloud security services?

With our mind map kit, you can quickly identify the paths an attacker might take, and how to proactively prepare for next time–all mapped to ATT&CK tactics.

When you download this kit, you’ll get:

The AWS mind map which connects AWS security monitoring tools and MITRE ATT&CK tactics
A defender’s cheat sheet to serve as a guide for how to use the mind map and to better understand the tactics, techniques, and API calls that could be involved in an attack
An editable mind map you can customize for your own SOC analysts to use during their investigations

MITRE ATT&CK AWS Mind Map Kit

Want more? We’ve got you covered.

MITRE ATT&CK in Microsoft Azure – Mind Map Kit

Sorting through Azure’s hundreds of services isn’t simple, so this MITRE ATT&CK in Microsoft Azure mind map can help you set up your security monitoring.

MITRE ATT&CK in GCP – Expel Mind Map Kit

A helpful resource to help you identify potential attacks in Google Cloud Platform (GCP) and map them to MITRE ATT&CK tactics.

MITRE ATT&CK in Kubernetes – Mind Map Kit

Use this MITRE ATT&CK in Kubernetes mind map to better understand your attack surface and ensure you have the right detection and mitigation strategies in place to address these risks.

Incident report: stolen AWS access keys

Here we walk through what happens when attackers steal a set of AWS access keys. Recently, our SOC, threat hunting, and detection engineering teams collaborated on such an incident.

5 pro tips for detecting in AWS

Cloud-based infrastructures can be confusing, but sometimes building a better security program starts with the basics. Try these pro tips to help focus the lens for detecting threats in AWS.