Invictus Incident Response

400 posts

Invictus Incident Response banner
Invictus Incident Response

Invictus Incident Response

@InvictusIR

Helping organizations respond to cyber incidents in the cloud | 🆘 24/7 support https://t.co/zfF62gimvm | 📚 Academy https://t.co/GH0u8tmjXJ

☁️ Katılım Mayıs 2021
31 Takip Edilen2.3K Takipçiler
Invictus Incident Response
🚀 Introducing 𝐀𝐥𝐥-𝐈𝐧 access for Cloud Labs Most cloud security training happens in a vacuum. Real-world attacks don't. We are incredibly excited to announce the launch of our All-in level for Cloud Labs. Here is what makes this scenario unique: 🌐 Cross-Cloud Attacks: You will trace sophisticated threats that pivot across different cloud environments, mimicking the true complexity of modern, multi-layered breaches. 🛠️ Live Environment Access: You get real, hands-on access to investigate active threat scenarios directly within live Google Workspace and Google Cloud environments. It is time to test your cloud incident response skills for real! #stayInvictus #CloudIncidentResponse #CloudLabs
Invictus Incident Response tweet mediaInvictus Incident Response tweet mediaInvictus Incident Response tweet mediaInvictus Incident Response tweet media
English
0
1
8
349
Invictus Incident Response
Invictus Incident Response@InvictusIR·
Happy is an understatement! This year we will be teaching both our AWS and Microsoft Cloud IR course at @BlackHatEvents in Las Vegas. Grateful for this opportunity!
Invictus Incident Response tweet mediaInvictus Incident Response tweet media
English
0
1
4
292
Invictus Incident Response
Invictus Incident Response@InvictusIR·
🧪New year, new lab, same quality! Another lab inspired on real life incident response cases. If you've worked on incidents in Entra ID you probably know the importance of 𝘌𝘯𝘵𝘦𝘳𝘱𝘳𝘪𝘴𝘦 𝘈𝘱𝘱𝘭𝘪𝘤𝘢𝘵𝘪𝘰𝘯𝘴 and 𝘈𝘱𝘱 𝘙𝘦𝘨𝘪𝘴𝘵𝘳𝘢𝘵𝘪𝘰𝘯𝘴. This lab is a deep dive on a lot of different techniques attackers abuse around apps in Entra. #stayInvictus #CloudLabs #CloudIncidentResponse
Invictus Incident Response tweet media
English
0
2
6
398
Invictus Incident Response
Invictus Incident Response@InvictusIR·
@UK_Daniel_Card Yeah it is a good time, because logs are always on, contrary to M365. Some logs depend on a license. Typical stuff we see ATO, OAuth apps an data theft. More exotic things when Google Cloud is involved. Let us know if we can help and good luck 🫡
English
2
0
8
421
mRr3b00t
mRr3b00t@UK_Daniel_Card·
Anyone here that does IR, have you ever done Google Workspace incidents and what did they look like?
English
16
6
51
12.2K
Invictus Incident Response
Invictus Incident Response@InvictusIR·
One of the most insecure defaults is getting less insecure at the end of this month. Microsoft is limiting what permissions a user can consent to. This is very interesting for everyone doing #BEC investigations. Curious to see if this will impact malicious app usage. More info (#microsoft-recommended-current-settings" target="_blank" rel="nofollow noopener">learn.microsoft.com/en-us/entra/id…) #stayInvictus #BEC #CloudIncidentResponse
Invictus Incident Response tweet media
English
0
8
35
3.5K
Invictus Incident Response
Invictus Incident Response@InvictusIR·
After the launch of Cloud Labs last month, we're excited to share with you the new 𝐏𝐫𝐞𝐦𝐢𝐮𝐦 lab for this month. We are committed to brining you a (at least one) new lab every month! Sign-up now: cloudlabs.invictus-ir.com
Invictus Incident Response tweet media
English
0
2
12
539