EC2 DFIR Workshop

About this Workshop..

GOALS:

• Understand how to investigate compromised Linux EC2 Instances
• Provide an investigative methodology that works in AWS
• Demonstrate the use of popular open source forensic tools on EC2

NON-GOALS:

• Does not provide training on how to use Amazon Web Services
• Does not cover basic forensic evidence handling for legal cases
• Does not cover Windows Forensics (large body of knowledge)