--- title: "Incident Response Archives - Cybr" description: "Read practical guides, tutorials, and security research about Incident Response from the Cybr blog." url: https://cybr.com/incident-response-archives/ --- From the blog # Incident Response Read practical guides, tutorials, and security research about Incident Response from the Cybr blog. Browse the archive ## Latest articles 10 on this page - June 26, 2025 ### Announcing Our First Azure Course: Getting Started with Microsoft Defender for Cloud We’ve been focused on AWS security for a while now, but here’s the thing: many of you work in multi-cloud environments or have been asking… Read article [Announcing Our First Azure Course: Getting Started with Microsoft Defender for Cloud](https://cybr.com/cloud-security/announcing-our-first-azure-course-getting-started-with-microsoft-defender-for-cloud/) - February 24, 2025 ### How hackers use this AWS ransomware attack There’s a “new” ransomware attack being used in AWS that you need to know about. But what is it, how does it work, and how can you defend against it? Let’s find out. Read article [How hackers use this AWS ransomware attack](https://cybr.com/cloud-security/how-hackers-use-this-aws-ransomware-attack/) - November 6, 2024 ### AWS Detection Engineering with Grimoire In a prior article, I showed you how to get started with a tool called Stratus Red Team to simulate adversaries by executing attacks against… Read article [AWS Detection Engineering with Grimoire](https://cybr.com/cloud-security/aws-detection-engineering-with-grimoire/) - September 20, 2024 ### S3 Bucket Backdoor Attack Simulation with Stratus Red Team Testing your AWS environment’s security measures and your blue team’s effectiveness is crucial, and the most effective way to do this is through simulated attacks.… Read article [S3 Bucket Backdoor Attack Simulation with Stratus Red Team](https://cybr.com/cloud-security/s3-bucket-backdoor-attack-simulation-with-stratus-red-team/) - May 8, 2024 ### Incident Response Playbook – EC2 Cryptomining \[Cheat Sheet\] You wake up tomorrow to a GuardDuty notification that there might be EC2 cryptomining activity going on in one of your AWS accounts. What’s your… Read article [Incident Response Playbook – EC2 Cryptomining \[Cheat Sheet\]](https://cybr.com/incident-response-archives/incident-response-playbook-ec2-cryptomining-cheat-sheet/) - January 16, 2024 ### My AWS IAM access keys were exposed & exploited…what should I do? \[Cheat Sheet\] My AWS access keys were exposed and are being exploited by a threat actor. What do I do? Step 1: Don’t panic. Here is the incident response playbook. Read article [My AWS IAM access keys were exposed & exploited…what should I do? \[Cheat Sheet\]](https://cybr.com/cloud-security/my-aws-iam-access-keys-were-exposed-what-should-i-do-cheat-sheet/) - September 22, 2023 ### Incident response process There’s been a security incident in your organization. What do you do? Panic? No ;)! You follow an incident response process. In this article, we’re… Read article [Incident response process](https://cybr.com/certifications-archives/incident-response-process/) - September 5, 2023 ### Must-have AWS security monitoring & alerting \[Cheat Sheet\] Most of us know that having visibility into our cloud accounts and resources is critical, but it can easily be overwhelming to implement. What should… Read article [Must-have AWS security monitoring & alerting \[Cheat Sheet\]](https://cybr.com/cloud-security/must-have-aws-security-monitoring-alerting-cheat-sheet/) - June 23, 2023 ### Disaster Recovery with BCP, COOP, and DRP For the CompTIA Security+ exam, you need to be familiar with three terms that are related to disaster recovery: What do each of these terms… Read article [Disaster Recovery with BCP, COOP, and DRP](https://cybr.com/certifications-archives/disaster-recovery-with-bcp-coop-and-drp/) - February 17, 2021 ### Detecting and Terminating Malware in Real-time For a webinar collaboration with a friend of mine, Ell Marquez, who works at Intezer, we wanted to demonstrate how web application vulnerabilities could be… Read article [Detecting and Terminating Malware in Real-time](https://cybr.com/incident-response-archives/detecting-and-terminating-malware-in-real-time/) 1[2](https://cybr.com/incident-response-archives/page/2/) [Next](https://cybr.com/incident-response-archives/page/2/)