Cloud access through Instance Metadata Service exfiltration

Helpful Link:

https://unit42.paloaltonetworks.com/hildegard-malware-teamtnt/

SEC540: Cloud Security and DevSecOps Automation

SEC540 provides security professionals with a methodology to secure modern Cloud and DevOps environments. Students learn how to implement more than 20 DevSecOps security controls to build, test, deploy, and monitor cloud infrastructure and services. Immersive hand-on labs ensure that students not only understand theory, but how to configure and implement each security control. By embracing the DevOps culture, students will walk away from SEC540 battle-tested and ready to build to their organization's Cloud and DevSecOps Security Program.

Certification: GIAC Cloud Security Automation (GCSA)