36How does a subdomain takeover happen through dangling DNS, and how would you prevent and detect it across hundreds of cloud resources?▼mediumNewMicrosoftAmazonCloudflare◆ premiumNobody attacks your DNS; they just claim the cloud resource your DNS still points at. The scored answer explains why it is so common and how to stop it at deprovisioning.Open full answer →
39How do you secure a managed cloud database such as RDS or Cloud SQL, including network access, IAM authentication, snapshots and audit logs?▼mediumNewAmazonGoogleMicrosoft◆ premiumManaged databases remove patching chores but add a control plane: whoever can call the cloud API can often copy, share or expose the whole database.Open full answer →
10What are the basics of digital forensics in an incident: order of volatility, evidence handling and what each artefact tells you?▼mediumNewCrowdStrikeMicrosoftGoogle○ sign inCollect the things that disappear first, change as little as possible, write down everything you did, and know which artefact answers which question. That is most of practical forensics.Open full answer →
12A finance employee's cloud mailbox was compromised and a supplier was asked to change bank details. How do you respond?▼mediumNewMicrosoftGoogleCrowdStrike◆ premiumResetting the password is step four, not step one. Attackers keep access through sessions, app consents and mailbox rules, and the money moves faster than the investigation.Open full answer →