gitea-mirror/hacktricks-cloud
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks-cloud.git synced 2025-12-05 20:40:18 -08:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
SirBroccoli
2025-08-18 16:48:30 +02:00
committed by GitHub
parent 3f16d3c5f3
commit f0df70528a
1 changed files with 0 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/pentesting-cloud/aws-security/aws-post-exploitation/aws-ec2-ebs-ssm-and-vpc-post-exploitation/README.md
View File

@@ -185,15 +185,6 @@ Tip: Compress and encrypt evidence before exfiltrating it so that CloudTrail doe
7z a evidence.7z /path/to/files/* -p'Str0ngPass!'
```
---
**Defence & Detection**
* Limit who can call `ssm:StartSession` or restrict the allowed SSM documents.
* Enable Session Manager logging to CloudWatch/S3 and monitor for the `AWS-StartPortForwardingSession` document.
* Use VPC endpoints plus traffic inspection to detect unexpected data egress.
### Share AMI