├── AWS logging overview-horizontal.png ├── Athena CheatSheet.pdf ├── Athena CheatSheet.png ├── EKS-logging.png ├── KQL CheatSheet.pdf ├── KQL-QueryPack ├── ReadMe.md ├── parameters.json └── template.json ├── README.md ├── Services-export.png ├── advanced_event_selectors.json ├── athena_cloudtrail.txt ├── check-logs.sh ├── export_all_guardduty_findings.sh ├── isolation_network.json └── isolation_user.json /AWS logging overview-horizontal.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/AWS logging overview-horizontal.png -------------------------------------------------------------------------------- /Athena CheatSheet.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/Athena CheatSheet.pdf -------------------------------------------------------------------------------- /Athena CheatSheet.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/Athena CheatSheet.png -------------------------------------------------------------------------------- /EKS-logging.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/EKS-logging.png -------------------------------------------------------------------------------- /KQL CheatSheet.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/KQL CheatSheet.pdf -------------------------------------------------------------------------------- /KQL-QueryPack/ReadMe.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/KQL-QueryPack/ReadMe.md -------------------------------------------------------------------------------- /KQL-QueryPack/parameters.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/KQL-QueryPack/parameters.json -------------------------------------------------------------------------------- /KQL-QueryPack/template.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/KQL-QueryPack/template.json -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/README.md -------------------------------------------------------------------------------- /Services-export.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/Services-export.png -------------------------------------------------------------------------------- /advanced_event_selectors.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/advanced_event_selectors.json -------------------------------------------------------------------------------- /athena_cloudtrail.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/athena_cloudtrail.txt -------------------------------------------------------------------------------- /check-logs.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/check-logs.sh -------------------------------------------------------------------------------- /export_all_guardduty_findings.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/export_all_guardduty_findings.sh -------------------------------------------------------------------------------- /isolation_network.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/isolation_network.json -------------------------------------------------------------------------------- /isolation_user.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/invictus-ir/Invictus-training/HEAD/isolation_user.json --------------------------------------------------------------------------------